Threat Intelligence

Live CVE feed

136 threats tracked across 6 launch stacks — sourced from NVD, GHSA, CISA KEV, and OSV.

Stack exposure — click to filter✕ Clear stack filter

2threats · FastAPI / Python · Critical

2 rules

python-jose algorithm confusion with OpenSSH ECDSA keys

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217.

OWASP A02OWASP WEB

2 rules

FastAPI app executed arbitrary Python via /api/v1/validate/code without authentication. Actively exploited in wild.

OWASP A03OWASP A07OWASP WEB

Showing 1–2 of 2 threats