Skip to content
OpenAdvisories

Package · Ubuntu

fastapi

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.8
    CVE-2024-40627

    OpaMiddleware does not filter HTTP OPTIONS requests

    Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP `OPTIONS` requests are always allowed by `OpaMiddleware`, even when they lack authentication, and are passed through directly to the application. `OpaMiddleware` allows all HTTP `O…

    busykoala fastapi-opa fastapi fastapi-opa Ubuntu PyPI
  • High 8.2
    CVE-2021-32677

    Cross-Site Request Forgery (CSRF) in FastAPI

    FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cro…

    tiangolo fastapi fastapi fastapi Debian Ubuntu PyPI