FastAPI security vulnerabilities
Developer framework / library. Public CVE monitoring for FastAPI. Vendor security advisories are linked on this page.
Built for Operators of this product.
14 public records · 0 security-fix timeline events. 0 published in the last 7 days. 6 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 2
- High 0
- Medium 0
- Low 0
2026-08-072 issues2026-11-04
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- Critical9.8The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication.Check if you run itEPSS 0.65%Oct 15, 2026
- Critical10.0Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chainCheck if you run itEPSS 0.53%Oct 2, 2026
- Medium5.3Python-Multipart is a streaming multipart parser for Python.Check if you run itEPSS 0.35%Apr 18, 2026
- Critical9.8In mlflow/mlflow, the FastAPI job endpoints under are not protected by authentication or authorization when the app is enabled.Check if you run itEPSS 4.39%Apr 3, 2026
- Medium5.5A security flaw has been discovered in FastApiAdmin up to 2.2.0.Check if you run itEPSS 0.48%Feb 23, 2026
- Medium5.9FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project.Check if you run itEPSS 0.26%Dec 19, 2025
- Medium6.9Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery (CSRF) due to the improper validation of the OAuth state parameter during the authentCheck if you run itEPSS 0.36%Dec 19, 2025
- High7.6Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI.Check if you run itEPSS 0.28%Jul 21, 2025
- Medium5.3Cross-Site Request Forgery (CSRF) in FastAPICheck if you run itEPSS 0.72%Jun 9, 2021