Product by Encode
Encode Starlette
10 known vulnerabilities in Encode Starlette (Encode), 1 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48710 | Kludex Starlette HTTP Request/Response Smuggling Vulnerability In CISA KEValso in 9 other products | 6.5 | |
| High | CVE-2023-29159 | Encode Starlette: Path Traversal | 7.5 | |
| High | CVE-2024-24762 | python-multipart vulnerable to content-type header Regular expression Denial of Service | 7.5 | |
| High | CVE-2023-30798 | MultipartParser DOS with too many fields or files in Starlette Framework | 7.5 | |
| High | CVE-2024-47874 | Starlette Denial of service (DoS) via multipart/form-data | — | |
| High | CVE-2026-54283 | Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS | 7.5 | |
| High | CVE-2026-48818 | Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows | 7.5 | |
| Medium | CVE-2025-54121 | Starlette has possible denial-of-service vector when parsing large files in multipart forms | 5.3 | |
| Medium | CVE-2026-54282 | Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname | 5.3 | |
| Medium | CVE-2026-48817 | Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` | 5.3 |