EEncode

Products

Exploited and recent CVEs

• CVE-2026-114138 High 7.5 Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation 0.6%
• CVE-2026-114137 High 7.4 Django REST framework: TokenProxy.delete() reports success and revokes nothing 0.5%
• CVE-2026-114136 High 7.5 Django REST framework: JSONParser applies an attacker-named codec to the request stream 0.5%
• CVE-2026-73229 Medium 4.3 Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests 0.4%
• CVE-2026-73228 Medium 5.3 Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data` 0.6%
• CVE-2025-54121 Medium 5.3 Starlette has possible denial-of-service vector when parsing large files in multipart forms 0.7%
• CVE-2024-47874 High 8.7 Starlette Denial of service (DoS) via multipart/form-data 0.7%
• CVE-2024-24762 High 7.5 python-multipart vulnerable to content-type header Regular expression Denial of Service 1.5%
• CVE-2023-29159 High 7.5 Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette. 2.6%
• CVE-2023-30798 High 7.5 MultipartParser DOS with too many fields or files in Starlette Framework 1.3%