Product by Kludex
Starlette
7 known vulnerabilities in Starlette (Kludex), 1 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48710 | Kludex Starlette HTTP Request/Response Smuggling Vulnerability In CISA KEValso in 9 other products | 6.5 | |
| High | CVE-2024-24762 | python-multipart vulnerable to content-type header Regular expression Denial of Service | 7.5 | |
| High | CVE-2025-62727 | Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse | 7.5 | |
| High | CVE-2026-54283 | Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS | 7.5 | |
| High | CVE-2026-48818 | Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows | 7.5 | |
| Medium | CVE-2026-54282 | Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname | 5.3 | |
| Medium | CVE-2026-48817 | Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` | 5.3 |