Encode

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

In CISA KEValso in 9 other products

Encode Httpx: Improper Input Validation

Encode Starlette: Path Traversal

python-multipart vulnerable to content-type header Regular expression Denial of Service

also in 2 other products

Encode Django-rest-framework: Uncontrolled Resource Consumption

Django REST framework: JSONParser applies an attacker-named codec to the request stream

Django REST framework: TokenProxy.delete() reports success and revokes nothing

MultipartParser DOS with too many fields or files in Starlette Framework

Starlette Denial of service (DoS) via multipart/form-data

Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS

also in 2 other products

Django REST Framework: Improper Input Validation

also in 2 other products

HTTP Response Splitting

Encode Django-rest-framework: Allocation of Resources Without Limits or Throttling

Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

also in 1 other product

Log Injection

Starlette has possible denial-of-service vector when parsing large files in multipart forms

Encode Django-rest-framework: Exposure of Sensitive Information to an Unauthorized Actor

Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

also in 2 other products

Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`

also in 2 other products