Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 24

starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00331 Published 2026-09-12 No fix listed CWE-863
Priority LOW 25

Starlette-Admin is a fast, beautiful and extensible administrative interface framework for FastAPI and Starlette applications.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00449 Published 2026-08-26 Fixed in 0.16.1 CWE-200