Skip to content
OpenAdvisories

Package · Ubuntu

fastapi

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.8

    OpaMiddleware does not filter HTTP OPTIONS requests

    Fastapi OPA is an opensource fastapi middleware which includes auth flow. HTTP `OPTIONS` requests are always allowed by `OpaMiddleware`, even when they lack authentication, and are passed through directly to the application. `OpaMiddleware` allows all HTTP `O…