335 matches found
Starlette - Improper Validation of Unsafe Equivalence in Input
A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...
LiteLLM - Command Injection
A critical unauthenticated remote code execution vulnerability exists in LiteLLM due to improper input handling in the MCP stdio test endpoint. An attacker can send a specially crafted request to the /mcp-rest/test/connection endpoint with controlled parameters, resulting in arbitrary command...
starlette-host-header-lab
Starlette Host-Header URL 混同ラボ X41-2026-002 X41 D-Sec が公開した Starlette 認証バイパス脆弱性を再現する、自己完結型のコンテナ化されたトレーニングラボです。 アドバイザリ: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — 解釈の競合 / 関数呼び出しにおける信頼できない入力 CVSS: 7.0 高 影響を受けるバージョン: Starlette = 0.8.3, ⚠️ 認可されたセキュリティトレーニング専用です。...
ROOT-APP-PYPI-CVE-2026-48818 CVE-2026-48818 in starlette - Patched by Root
Root has patched CVE-2026-48818 in the starlette package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-93GM-QMQ6-W238 GHSA-93gm-qmq6-w238 in starlette - Patched by Root
Root has patched GHSA-93gm-qmq6-w238 in the starlette package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-47874 CVE-2024-47874 in starlette - Patched by Root
Root has patched CVE-2024-47874 in the starlette package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48710 CVE-2026-48710 in starlette - Patched by Root
Root has patched CVE-2026-48710 in the starlette package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54283 CVE-2026-54283 in starlette - Patched by Root
Root has patched CVE-2026-54283 in the starlette package for Root:PyPI. Multiple fixed versions available...
BadHost-CVE-2026-48710-Exploit
BadHost — CVE-2026-48710 스캐너 Starlette / FastAPI의 BadHost 인증 우회 전용 스캐너 — 인증 미들웨어가 request.scope"path" 대신 request.url.path를 읽어서, 조작된 Host 헤더로 허용된 경로를 밀수하여 인증을 우회할 수 있습니다. root@kitploit: GET /admin HTTP/1.1 Host: api.internal/health?badhost= Starlette sees request.url.path == "/health" → allowed AS...
CVE-2026-46645-Analysis-Lab
CVE-2026-46645 - SQLAdmin ajaxlookup 認可バイパス 概要 このリポジトリには、SQLAdmin の ajaxlookup エンドポイントに影響する認可バイパス脆弱性 CVE-2026-46645 を再現するためのローカル Docker ラボが含まれています。 SQLAdmin は、Starlette および FastAPI アプリケーションの SQLAlchemy モデル向けの管理インターフェースです。脆弱な動作は、アプリケーションが isaccessiblerequest で ModelView を制限しているにもかかわらず、SQLAdmin の...
CVE-2026-89267
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchablefields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality an...
CVE-2026-89267
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when it is configured as an empty list. As a result, authenticated users can submit structured filter queries via the list API's where parameter to perform equality and comparison operations on columns ...
EUVD-2026-76772
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchablefields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality an...
CVE-2026-89267 starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchablefields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality an...
CVE-2026-89267 starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchablefields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality an...
PT-2026-90553
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable fields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality a...
CVE-2026-48710
CVE-2026-48710 原理： Starletteはオープンソースの軽量なPython ASGIフレームワークです。 StarletteフレームワークがURLデータ構造の処理においてクライアントが送信したhostを信頼し、そのままurl変数に連結して後続の認証処理を行うことに起因します。 元のURLは uvicorn\protocols\http\httptoolsimpl.py で処理されます def onmessagebeginself - None: self.url = b"" self.expect100continue = False self.headers =...
CVE-2025-62727-Demo
CVE-2025-62727 デモ 被害者アプリの説明 CVE-2025-62727 の対象となる被害者は、以下の機能を持つシンプルな FastAPI アプリです: / で Hello World を返します。 Starlette の StaticFiles を使用して /static 配下の静的ファイルを配信します。 起動時に A を N 回繰り返したテキストファイルを自動生成します（N は 1024, 2048, 50176）。 被害者アプリの実行方法 1. （任意）virtualenv を作成して有効化します。 2. 依存関係をインストールします: root@kitploit: p...