Starlette security vulnerabilities
Developer framework / library. Public CVE monitoring for Starlette. Vendor security advisories are linked on this page.
Built for Operators of this product.
10 public records · 0 security-fix timeline events. 0 published in the last 7 days. 10 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 0
- Medium 0
- Low 0
2026-08-080 issues2026-11-05
Known exploited
View all known exploitedRecently published
Browse catalog- High7.5request.form() limits silently ignored for application/x-www-form-urlencoded enable DoSCheck if you run itEPSS 0.48%Jun 12, 2026
- High7.5SSRF and NTLM credential theft via UNC paths in StaticFiles on WindowsCheck if you run itEPSS 0.37%May 23, 2026
- Medium5.3Arbitrary HTTP method dispatched to attributes viaCheck if you run itEPSS 0.21%May 23, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 70.29%May 21, 2026
- High7.5Starlette is a lightweight ASGI framework/toolkit.Check if you run itEPSS 0.80%Oct 28, 2025
- Medium5.3Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python.Check if you run itEPSS 0.66%Jul 20, 2025
- HighDenial of service (DoS) via multipart/form-dataCheck if you run itEPSS 0.65%Oct 15, 2024
- MediumMultipartParser DOS with too many fields or filesOpen the advisoryFeb 14, 2023