Vulnerabilities

TI-2026-02571 CVE-2026-2979 · GHSA-m879-6gvr-239v

FastApiAdmin Scheduled Task API controller.py user_avatar_upload_controller unrestricted upload

MEDIUM 57

A flaw has been found in FastApiAdmin up to 2.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00341 Published 2026-02-23 No fix listed CWE-284

TI-2026-02570 CVE-2026-2978 · GHSA-qmq9-8xrr-rx63

MEDIUM 57

A vulnerability was detected in FastApiAdmin up to 2.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00389 Published 2026-02-23 No fix listed CWE-284

TI-2026-02569 CVE-2026-2977 · GHSA-rgpr-47mq-rh3c

MEDIUM 57

A security vulnerability has been detected in FastApiAdmin up to 2.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0034 Published 2026-02-23 No fix listed CWE-284

TI-2026-02568 CVE-2026-2976 · GHSA-p2cq-gh8c-83cc

MEDIUM 57

A weakness has been identified in FastApiAdmin up to 2.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0036 Published 2026-02-23 No fix listed CWE-200

TI-2026-02567 CVE-2026-2975 · GHSA-h4v7-f6v2-4hmm

HIGH 70

A security flaw has been discovered in FastApiAdmin up to 2.2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00479 Published 2026-02-23 No fix listed CWE-200