Threats tagged 'brew-fastmcp-cve-2026-48817'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-48817Starlette · Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` Medium5.3EPSS 0.2%2026-08-13GCVE DatabaseCVE-2026-48817 CVE-2026-48817 is a vulnerability in Starlette's HTTPEndpoint where arbitrary HTTP methods can invoke unintended endpoint attributes. This occurs when an HTTPEndpoint subclass is registered without explicitly restricting allowed HTTP methods, allowing non-standard methods to call internal methods as handlers. The issue affects Starlette and frameworks built on it, such as FastAPI. The vulnerability is fixed in version 3.4.0. EPSS 0.2%Report on CVE-2026-48817 Vulnerability #brew-fastmcp-cve-2026-48817 #homebrew	GCVE Database	2026-08-13

Page 1 of 1