17 matches found
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-54282 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...
asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-54282 via starlette (0.42.0)
starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-48817 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...
asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-48817 via starlette (0.42.0)
starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...
asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-48818 via starlette (0.42.0)
starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-48818 Source advisory: OSV:PYSEC-2026-2281...
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-48818 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-48818 Source advisory: OSV:PYSEC-2026-2281...
asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-54282 via starlette (0.42.0)
starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-54282 Source advisory: OSV:GHSA-JP82-JPQV-5VV3...
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-54282 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-54282 Source advisory: OSV:GHSA-JP82-JPQV-5VV3...
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-48818 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-48818 Source advisory: OSV:GHSA-WQP7-X3PW-XC5R...
asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-48817 via starlette (0.42.0)
starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-48817 Source advisory: OSV:GHSA-X746-7M8F-X49C...
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-48817 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-48817 Source advisory: OSV:GHSA-X746-7M8F-X49C...
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-48710 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...
asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-48710 via starlette (0.42.0)
starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...
asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-48710 via starlette (0.43.0)
starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-48710 Source advisory: OSV:PYSEC-2026-161...
CVE-2024-54002
Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Performing a login request against the /api/v1/user/login endpoint with a username that exist in the system takes significantly longer than performing the same...
CVE-2024-54002: Observable Discrepancy
Dependency-Track is a Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Performing a login request against the /api/v1/user/login endpoint with a username that exist in the system takes significantly longer than performing the same...
HashiCorp Vault DoS
The vulnerability of the maxrequestduration component in the HashiCorp Vault and Vault Enterprise platforms for archiving corporate information involves unlimited resource allocation during HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service...