Vulnerabilities in encode
7 resultsVexday analysis
O fornecedor encode apresenta 3 vulnerabilidades cadastradas sem histórico de exploração ativa (KEV) e nenhuma crítica registrada. A fraqueza predominante (CWE-770 - Alocação de Recurso sem Limites) sugere riscos potenciais de negação de serviço, mas a ausência de publicações recentes indica que o risco não é emergente no momento.
CVE-2023-29159HIGHDirectory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to vieEPSS 2.0%CVE-2024-24762HIGHpython-multipart vulnerable to content-type header Regular expression Denial of ServiceEPSS 1.5%CVE-2023-30798HIGHMultipartParser DOS with too many fields or files in Starlette FrameworkEPSS 1.3%CVE-2024-47874HIGHStarlette Denial of service (DoS) via multipart/form-dataEPSS 0.7%CVE-2025-54121MEDIUMStarlette has possible denial-of-service vector when parsing large files in multipart formsEPSS 0.6%CVE-2026-73228MEDIUMDjango REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`EPSS 0.4%CVE-2026-73229MEDIUMDjango REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requestsEPSS 0.3%