Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Kludex — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting Kludex. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Kludex is a cybersecurity tool focused on vulnerability intelligence and attack surface management, helping organizations identify and prioritize security risks. Historically, Kludex has been associated with vulnerabilities including remote code execution, cross-site scripting, and privilege escalation flaws. The platform has recorded five CVEs to date, with some instances involving improper input validation and insecure default configurations. While no major public security incidents have been widely reported, the presence of multiple CVEs indicates potential areas for improvement in secure coding practices and security testing protocols. Kludex continues to evolve its security posture while providing vulnerability management services to its user base.

Top products by Kludex: python-multipart starlette
CVE ID Title CVSS Severity Published
CVE-2026-53540 Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory — python-multipart CWE-1284 3.7 Low 2026-06-22
CVE-2026-53537 Python-Multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters — python-multipart CWE-20 3.7 Low 2026-06-22
CVE-2026-53538 Python-Multipart: Semicolon treated as querystring field separator enables parameter smuggling — python-multipart CWE-436 3.7 Low 2026-06-22
CVE-2026-53539 Python-Multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service — python-multipart CWE-400 7.5 High 2026-06-22
CVE-2026-54283 Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS — starlette CWE-770 7.5 High 2026-06-22
CVE-2026-54282 Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname — starlette CWE-706 3.7 Low 2026-06-22
CVE-2026-48817 Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` — starlette CWE-470 5.3 Medium 2026-06-17
CVE-2026-48818 Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows — starlette CWE-918 7.5 High 2026-06-17
CVE-2026-48710 Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks — starlette CWE-444 6.5 Medium 2026-05-26
CVE-2026-42561 Python-Multipart: Denial of Service via unbounded multipart part headers — python-multipart CWE-770 7.5 High 2026-05-13
CVE-2026-40347 Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data — python-multipart CWE-400 5.3 Medium 2026-04-17
CVE-2026-24486 Python-Multipart has Arbitrary File Write via Non-Default Configuration — python-multipart CWE-22 8.6 High 2026-01-27
CVE-2025-62727 Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse — starlette CWE-407 7.5 High 2025-10-28
CVE-2024-53981 python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary — python-multipart CWE-770 7.5 High 2024-12-02
CVE-2024-24762 python-multipart vulnerable to content-type header Regular expression Denial of Service — python-multipart CWE-400 7.5 High 2024-02-05

This page lists every published CVE security advisory associated with Kludex. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.