Skip to content

jowilf starlette-admin

CVE-2026-89267 Medium 4.3 starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass 0.3%
CVE-2026-54553 Medium 5.4 Starlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS 0.4%