Fastapiadmin - vulnerabilities (CVEs)

7 CVEs in 2 products, 2 in the last 30 days, newest from 2026-10-16.

Products

CVE-2026-111642 - CVSS 8.8 (high), 2026-10-16: FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens…
CVE-2026-111641 - CVSS 9.8 (critical), 2026-10-16: FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing…
CVE-2026-2979 - CVSS 8.8 (high), 2026-02-23: A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user_avatar_upload_controller of the file…
CVE-2026-2978 - CVSS 8.8 (high), 2026-02-23: A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function upload_file_controller of the file…
CVE-2026-2977 - CVSS 8.8 (high), 2026-02-23: A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function upload_controller of the file…
CVE-2026-2976 - CVSS 6.5 (medium), 2026-02-23: A weakness has been identified in FastApiAdmin up to 2.2.0. Affected by this issue is the function download_controller of the file…
CVE-2026-2975 - CVSS 6.9 (medium), 2026-02-23: A security flaw has been discovered in FastApiAdmin up to 2.2.0. Affected by this vulnerability is the function reset_api_docs of the file…