jowilf
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| starlette-admin | 2 | – | Sep 12, 2026 |
Exploited and recent CVEs
- CVE-2026-89267 starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass 0.3%
- CVE-2026-54553 Starlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS 0.4%