esmerald (0.4.0), fast-token-classifier (>=0.1.0, <=0.2.3) +2 more potentially affected by CVE-2026-48817 via starlette (0.23.0)

starlette PYPI version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - esmerald 0.4.0 - fast-token-classifier =0.1.0, =0.2.3 - fastapi 0.90.0 - fastapi-stack-utils 0.8.4 Source cves: CVE-2026-48817 Source advisor...

a7a1234 (1.0.0), alipcs-py (>=0.3.2, <=0.3.4) +39 more potentially affected by CVE-2026-48817 via starlette (0.21.0)

starlette PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - a7a1234 1.0.0 - alipcs-py =0.3.2, =1.3.12, =0.0.1, =0.27.3, =0.1.9, =2022.11.0, =0.1.6, =0.6.0a0, =1.2.1, =1.2.2 - fastapi-stack-utils 0.7.1...

dms (0.0.1), fastapi (>=0.38.0, <=0.40.0) +6 more potentially affected by CVE-2026-48817 via starlette (0.12.8)

starlette PYPI version 0.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - dms 0.0.1 - fastapi =0.38.0, =0.1.24, =5.4.0, =0.1.0, =0.0.1, =0.14.4, =0.15.0 Source cves: CVE-2026-48817 Source advisory:...

PT-2026-49597

Name of the Vulnerable Software and Affected Versions Starlette affected versions not specified FastAPI affected versions not specified Description A Denial of Service DoS issue exists in the request.form function when processing application/x-www-form-urlencoded requests. While limits for max...

CVE-2026-36728

A markdown based cross-site scripting XSS vulnerability in the AI assistant chat function of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a chat message...

CVE-2026-36725

A markdown based cross-site scripting XSS vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the noticecontent parameter...

CVE-2026-36725

A markdown-based cross-site scripting (XSS) vulnerability exists in FastapiAdmin v2.2.0 . The flaw is located in the /system/notice/create endpoint, where a lack of proper input neutralization allows attackers to execute arbitrary web scripts or HTML. This is achieved by injecting a crafted paylo...

FastapiAdmin Cross-Site Scripting Vulnerability

FastApiAdmin is a full-stack rapid development platform based on FastAPI, developed by fastapiadmin. Version 2.2.0 of FastApiAdmin contains a cross-site scripting vulnerability. This vulnerability stems from the /system/notice/create endpoint, which has a cross-site scripting vulnerability relate...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), agentstack-cli (>=0.4.0rc1, <=0.7.1) +189 more potentially affected by CVE-2026-41479 via authlib (>=1.0.0b2, <=1.6.9)

authlib PYPI version =1.0.0b2, =1.0.0, =0.4.0rc1, =0.1.0, =0.1.0, =0.5.0, =1.3.0a20250904, =1.2.0a20250730, =1.2.0a20250730, =0.0.0, =1.7.0, =0.0.1, =0.1.0, =1.0.3, =2.0.0, =2.5.0 and more Source cves: CVE-2026-41479 Source advisory: OSV:GHSA-W8P2-R796-3VMQ...

aad-fastapi (>=1.0.0, <=1.1.2), aad-fastapi-dl37 (1.0.3) +11 more potentially affected by CVE-2026-41479 via authlib (0.15.4)

authlib PYPI version 0.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on authlib and may be impacted: - aad-fastapi =1.0.0, =0.0.1, =1.0.2, =1.0.2, =0.1.9, =3.37.0, =1.0.0, =2.6.0.dev1, =0.1.1, =0.4.0, =14.0.3, =14.8.2 Source cves: CVE-2026-41479...

fastapi (0.77.0), goe-framework (>=1.0.6.dev0, <=1.1.0) +1 more potentially affected by CVE-2026-48710 via starlette (0.19.0)

starlette PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - fastapi 0.77.0 - goe-framework =1.0.6.dev0, =0.2.6, =0.2.8 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

bali-core (>=3.1.0, <=3.2.1), datapipe-app (0.1.7) +7 more potentially affected by CVE-2026-48710 via starlette (0.15.0)

starlette PYPI version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - bali-core =3.1.0, =0.9.0, =1.0.0, =0.1.3, =0.1.7 - yiri-mirai 0.1.3 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

acte (>=0.0.3, <=0.0.15), ellar (>=0.8.0b1, <=0.8.7) +4 more potentially affected by CVE-2026-48710 via starlette (0.38.2)

starlette PYPI version 0.38.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - acte =0.0.3, =0.8.0b1, =0.1.0, =0.1.1, =0.1.0, =0.1.2 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

balto (>=0.1.5, <=0.3.0), fastapi (>=0.34.0, <=0.37.0) +3 more potentially affected by CVE-2026-48710 via starlette (0.12.7)

starlette PYPI version 0.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - balto =0.1.5, =0.34.0, =0.1.7, =0.14.0, =0.14.3 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

esmerald (0.4.0), fast-token-classifier (>=0.1.0, <=0.2.3) +2 more potentially affected by CVE-2026-48710 via starlette (0.23.0)

starlette PYPI version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - esmerald 0.4.0 - fast-token-classifier =0.1.0, =0.2.3 - fastapi 0.90.0 - fastapi-stack-utils 0.8.4 Source cves: CVE-2026-48710 Source advisor...

fastapi (0.1.18) potentially affected by CVE-2026-48710 via starlette (0.9.10)

starlette PYPI version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - fastapi 0.1.18 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

aa-fastapi-template (>=0.12.0, <=0.25.0), aac (>=0.4.0, <=0.5.21) +309 more potentially affected by CVE-2026-48710 via starlette (0.36.3)

starlette PYPI version 0.36.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aa-fastapi-template =0.12.0, =0.4.0, =0.1.0, =0.1.3, =0.0.1, =0.1.5, =0.1.1, =0.0.6, =0.2.0, =1.4.57, =0.0.1, =0.0.0, =0.2.1 - aita 0.1.0 and...

abuse-whois (0.1.0), adze-modeler (0.0.1) +131 more potentially affected by CVE-2026-48710 via starlette (0.16.0)

starlette PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.1.0 - adze-modeler 0.0.1 - aioauth-fastapi 0.0.1 - anyforce =0.9.0, =0.0.6, =0.0.1, =0.0.6, =1.0.0, =1.0.0, =0.2.0, =1.2.3,...

fastapi (>=0.6.0, <=0.22.0) potentially affected by CVE-2026-48710 via starlette (0.11.1)

starlette PYPI version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - fastapi =0.6.0, =0.22.0 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

a7a1234 (1.0.0), alipcs-py (>=0.3.2, <=0.3.4) +39 more potentially affected by CVE-2026-48710 via starlette (0.21.0)

starlette PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - a7a1234 1.0.0 - alipcs-py =0.3.2, =1.3.12, =0.0.1, =0.27.3, =0.1.9, =2022.11.0, =0.1.6, =0.6.0a0, =1.2.1, =1.2.2 - fastapi-stack-utils 0.7.1...