Read the docs

encode

Records19All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

encode records in CISA KEV
TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02

Components

Products in the NVD configurations · select one to filter the records
Starlette 7 records CRITICAL Uvicorn 2 records LOW Django Rest Framework 1 record LOW Httpx 1 record MEDIUM

Records

7 records in Starlette · all components

TI-2023-13590 CVE-2023-29159 · GHSA-v5gw-mw7f-84px

Path traversal in encode Starlette

Priority HIGH 72

Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02593 Published 2023-06-01 Fixed in 0.27.0 CWE-22
TI-2023-14608 CVE-2023-30798 · GHSA-74m5-2c7w-9w3x

MultipartParser DOS with too many fields or files in Starlette Framework

Priority MEDIUM 41

There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01299 Published 2023-04-21 Fixed in 0.25.0 CWE-400
Open these records in search →