E
Vendor security profile1 actively exploited CVEs
encode
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV1
Public exploit4
Patch rate%50
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
0
1
1
0
2
0
0
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High2 (33%)
Medium3 (50%)
Patch and exploitation view
%50
Verified patch
%17
CISA KEV
%67
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
7.1
CVE-2026-73362
WordPress URL Shortify plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
K
Patch status unknownEPSS %0
4.3
CVE-2026-73229
Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
E
Patch status unknownEPSS %0
5.3
CVE-2026-73228
Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
E
Patch status unknownEPSS %1
7.5
CVE-2026-48818
Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows
K
Patch verifiedEPSS %1
6.5
CVE-2026-48710 Actively exploited
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
K
Patch verifiedEPSS %7
7.5
CVE-2023-30798
Uncontrolled resource consumption in Encode Starlette
E
Patch verifiedEPSS %1
9.1
CVE-2021-41945
Improper input validation in Encode Httpx
E
Patch status unknownEPSS %2