Vulnerabilities in Encode
10 resultsCVE-2023-29159HIGHDirectory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to vieEPSS 2.6%CVE-2024-24762HIGHpython-multipart vulnerable to content-type header Regular expression Denial of ServiceEPSS 1.5%CVE-2023-30798HIGHMultipartParser DOS with too many fields or files in Starlette FrameworkEPSS 1.3%CVE-2025-54121MEDIUMStarlette has possible denial-of-service vector when parsing large files in multipart formsEPSS 0.7%CVE-2024-47874HIGHStarlette Denial of service (DoS) via multipart/form-dataEPSS 0.7%CVE-2026-114138HIGHDjango REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiationEPSS 0.6%CVE-2026-73228MEDIUMDjango REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`EPSS 0.6%CVE-2026-114137HIGHDjango REST framework: TokenProxy.delete() reports success and revokes nothingEPSS 0.5%CVE-2026-114136HIGHDjango REST framework: JSONParser applies an attacker-named codec to the request streamEPSS 0.5%CVE-2026-73229MEDIUMDjango REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requestsEPSS 0.4%