Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5request.form() limits silently ignored for application/x-www-form-urlencoded enable DoSCheck if you run itEPSS 0.48%Jun 12, 2026
- Low3.7Unvalidated request path concatenated into authority poisons request.url.hostnameCheck if you run itEPSS 0.27%Jun 11, 2026
- High7.5SSRF and NTLM credential theft via UNC paths in StaticFiles on WindowsCheck if you run itEPSS 0.37%May 23, 2026
- Medium5.3Arbitrary HTTP method dispatched to attributes viaCheck if you run itEPSS 0.21%May 23, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 70.29%May 21, 2026
- High7.5Starlette is a lightweight ASGI framework/toolkit.Check if you run itEPSS 0.80%Oct 28, 2025
- Medium5.3Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python.Check if you run itEPSS 0.66%Jul 20, 2025
- HighDenial of service (DoS) via multipart/form-dataCheck if you run itEPSS 0.65%Oct 15, 2024
- Low3.7Path traversal vulnerability in StaticFilesOpen the advisoryMay 16, 2023
- MediumMultipartParser DOS with too many fields or filesOpen the advisoryFeb 14, 2023
Sort
10 records