Skip to content
OpenAdvisories

Package · PyPI

fastapi-api-key

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.7
    CVE-2026-23996

    FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection

    FastAPI Api Key provides a backend-agnostic library that provides an API key system. Version 1.1.0 has a timing side-channel vulnerability in verify_key(). The method applied a random delay only on verification failures, allowing an attacker to statistically …

    Athroniaeth fastapi-api-key fastapi-api-key PyPI