What’s Vulnerable › Products
Kludex starlette vulnerabilities
10 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your Kludex starlette version is affected
Exploited Kludex starlette vulnerabilities
- CVE-2026-48710 — Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Latest Kludex starlette vulnerabilities
- CVE-2026-54283 — Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS (CVSS 7.5)
- CVE-2026-54282 — Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname (CVSS 5.3)
- CVE-2026-48817 — Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` (CVSS 5.3)
- CVE-2026-48818 — Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows (CVSS 7.5)
- CVE-2026-48710 — Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CVSS 6.5) — exploited
- CVE-2025-62727 — Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse (CVSS 7.5)
- CVE-2025-54121 — Starlette has possible denial-of-service vector when parsing large files in multipart forms (CVSS 5.3)
- CVE-2024-47874 — Starlette Denial of service (DoS) via multipart/form-data (CVSS 8.7)
- CVE-2023-29159 — (CVSS 7.5)
- CVE-2023-30798 — MultipartParser DOS with too many fields or files in Starlette Framework (CVSS 7.5)