Browse all 15 CVE security advisories affecting Kludex. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Kludex is a cybersecurity tool focused on vulnerability intelligence and attack surface management, helping organizations identify and prioritize security risks. Historically, Kludex has been associated with vulnerabilities including remote code execution, cross-site scripting, and privilege escalation flaws. The platform has recorded five CVEs to date, with some instances involving improper input validation and insecure default configurations. While no major public security incidents have been widely reported, the presence of multiple CVEs indicates potential areas for improvement in secure coding practices and security testing protocols. Kludex continues to evolve its security posture while providing vulnerability management services to its user base.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54283 | Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS — starlette CWE-770 | 7.5 | High | 2026-06-22 |
| CVE-2026-54282 | Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname — starlette CWE-706 | 3.7 | Low | 2026-06-22 |
| CVE-2026-48817 | Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` — starlette CWE-470 | 5.3 | Medium | 2026-06-17 |
| CVE-2026-48818 | Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows — starlette CWE-918 | 7.5 | High | 2026-06-17 |
| CVE-2026-48710 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks — starlette CWE-444 | 6.5 | Medium | 2026-05-26 |
| CVE-2025-62727 | Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse — starlette CWE-407 | 7.5 | High | 2025-10-28 |
This page lists every published CVE security advisory associated with Kludex. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.