encode vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20242
3. 20251
4. 20265

Newest CVEs

• CVE-2026-114138

  Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation

  encode · django-rest-framework

  High7.5
• CVE-2026-114137

  Django REST framework: TokenProxy.delete() reports success and revokes nothing

  encode · django-rest-framework

  High7.4
• CVE-2026-114136

  Django REST framework: JSONParser applies an attacker-named codec to the request stream

  encode · django-rest-framework

  High7.5
• CVE-2026-73229

  Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

  encode · django-rest-framework

  Medium4.3
• CVE-2026-73228

  Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

  encode · django-rest-framework

  Medium5.3
• CVE-2025-54121

  Starlette has possible denial-of-service vector when parsing large files in multipart forms

  encode · starlette

  Medium5.3
• CVE-2024-47874

  Starlette Denial of service (DoS) via multipart/form-data

  encode · starlette

  High8.7
• CVE-2024-24762

  python-multipart vulnerable to content-type header Regular expression Denial of Service

  Kludex · python-multipart

  High7.5
• CVE-2023-29159

  Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web…

  Encode · Starlette

  High7.5
• CVE-2023-30798

  MultipartParser DOS with too many fields or files in Starlette Framework

  Encode · Starlette

  High7.5