408 matches found
starlette-host-header-lab
Starlette 호스트 헤더 URL 혼동 실습 X41-2026-002 X41 D-Sec이 공개한 Starlette 인증 우회 취약점을 재현하는 자체 포함형 컨테이너 기반 교육 실습입니다. 권고Advisory: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — 해석 충돌 / 함수 호출의 신뢰할 수 없는 입력 CVSS: 7.0 높음 영향 범위: Starlette = 0.8.3, ⚠️ 승인된 보안 교육용으로만 사용하세요. 이 앱은 의도적으로 취약하게 설계되었습니다. 외부에서 접근 가능한...
BadHost-CVE-2026-48710-Exploit
BadHost — CVE-2026-48710 Scanner Detection-only scanner for the BadHost auth-bypass in Starlette / FastAPI — where auth middleware reads request.url.path instead of request.scope"path", allowing a crafted Host header to smuggle an allowlisted path and bypass authentication. GET /admin HTTP/1.1...
CVE-2026-46645-Analysis-Lab
CVE-2026-46645 - SQLAdmin ajaxlookup 인가 우회 요약 이 저장소는 SQLAdmin의 ajaxlookup 엔드포인트에 영향을 미치는 인가 우회 취약점인 CVE-2026-46645를 재현하기 위한 로컬 Docker 랩을 포함합니다. SQLAdmin은 Starlette 및 FastAPI 애플리케이션의 SQLAlchemy 모델을 위한 관리 인터페이스입니다. 취약한 동작은 애플리케이션이 isaccessiblerequest로 ModelView를 제한할 때 발생하며, SQLAdmin의 ajaxlookup 라우트...
Starlette - Improper Validation of Unsafe Equivalence in Input
A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...
CVE-2026-48710
CVE-2026-48710 원리: Starlette는 오픈소스 경량 Python ASGI 프레임워크입니다. 이는 Starlette 프레임워크가 URL 데이터 구조 처리에서 클라이언트가 보낸 host를 신뢰하여 URL 변수에 직접 이어붙인 뒤 후속 인증 처리를 수행하기 때문입니다. 원본 URL은 uvicorn\protocols\http\httptoolsimpl.py에서 처리됩니다. def onmessagebeginself - None: self.url = b"" self.expect100continue = False...
CVE-2025-62727-Demo
CVE-2025-62727 데모 피해자Victim 설명 CVE-2025-62727의 대상 피해자는 다음과 같은 간단한 FastAPI 앱입니다: /에서 Hello World를 제공합니다. Starlette의 StaticFiles를 사용하여 /static 아래에서 정적 파일을 제공합니다. 시작 시 1024, 2048, 50176 중 N에 대해 A가 N번 반복된 텍스트 파일을 자동 생성합니다. 피해자 실행 방법 1. 선택 사항 virtualenv를 생성하고 활성화합니다. 2. 의존성을 설치합니다: pip install -r...
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
SummaryIn SSE/HTTP transport mode, mysqlmcpserver constructs SseServerTransport without passing securitysettings. As a result, the MCP Python SDK's DNS-rebinding protection Origin/Host header validation is disabled; the Starlette application has no CORS or TrustedHost middleware; and the service...
LiteLLM - Command Injection
A critical unauthenticated remote code execution vulnerability exists in LiteLLM due to improper input handling in the MCP stdio test endpoint. An attacker can send a specially crafted request to the /mcp-rest/test/connection endpoint with controlled parameters, resulting in arbitrary command...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Starlette (CVE-2026-48817, CVE-2026-48818)
Summary Multiple vulnerabilities in the Starlette ASGI framework CVE-2026-48817, CVE-2026-48818 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 1.3.1. Vulnerability Details CVEID:CVE-2026-48817 DESCRIPTION: Starlette is a lightweight ASGI...
Malicious code in starlette-healthchecks (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebffb3f581b979c3e9a1dc0aef347111b50922326b2181cc9d2bc009c4e7021 The package advertises itself as ASGI healthcheck/logging middleware, but its documented entry point configurelogging re-exported from...
MAL-2026-16356 Malicious code in starlette-healthchecks (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebffb3f581b979c3e9a1dc0aef347111b50922326b2181cc9d2bc009c4e7021 The package advertises itself as ASGI healthcheck/logging middleware, but its documented entry point configurelogging re-exported from...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Starlette (CVE-2026-54283)
Summary A resource exhaustion Denial of Service vulnerability in the Starlette ASGI framework library CVE-2026-54283 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 1.3.1. Vulnerability Details CVEID:CVE-2025-54121 DESCRIPTION: Starlette is a...
The vulnerability of the OAuth authentication component for web applications based on the Starlette library, provided by the Authlib library for OAuth servers and OpenID Connect, allows a hacker to perform a CSRF attack.
The vulnerability of the OAuth authentication component for web applications based on the Starlette library, provided by the Authlib library for OAuth and OpenID Connect servers, is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to...
OESA-2026-3977 python-starlette security update
%expand: Security Fixes: Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and below, when dispatching a request, HTTPEndpoint selects the handler by lowercasing the HTTP method and looking it up as an attribute with getattr, without restricting the lookup to a known set of HTT...
MGASA-2026-0413 Updated python-starlette package fixes security vulnerabilities
Arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr. CVE-2026-48817 Unvalidated request path concatenated into authority poisons request.url.hostname. CVE-2026-54282...
Updated python-starlette package fixes security vulnerabilities
Arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr. CVE-2026-48817 Unvalidated request path concatenated into authority poisons request.url.hostname. CVE-2026-54282...
CLSA-2026-1789648460 TuxCare security update for starlette (1 CVE)
TuxCare rebuilt starlette to address 1 CVE. Fixed in 0.13.6.post6+tuxcare...
CLSA-2026-1789537996 TuxCare security update for starlette (4 CVEs)
TuxCare rebuilt starlette to address 4 CVEs. Fixed in 0.13.6.post5+tuxcare...
CVE-2026-59971 MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL databases. Prior to 0.4.2, setting MCPTRANSPORT=sse causes src/mysqlmcpserver/server.py to construct SseServerTransport without securitysettings or enablednsrebindingprotection, while the Starlette rout...