fastapi (PyPI)
FastAPI framework, high performance, easy to learn, fast to code, ready for production
Advisories
6
Latest version
0.162.0
Released Oct 23, 2026
License
MIT
OpenSSF Scorecard
—
How to fix
Upgrading to 0.109.1 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "fastapi>=0.162.0"poetry
poetry add "fastapi>=0.162.0"uv
uv add "fastapi>=0.162.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| MAL-2026-4750 Malicious code in fastapi (PyPI) Withdrawn |
Not rated yet | No fix yet | |
| PYSEC-2024-38 python-multipart vulnerable to Content-Type Header ReDoS |
High EPSS 1.52% |
< 0.109.1 | 0.109.1 |
| PYSEC-2024-38 python-multipart vulnerable to Content-Type Header ReDoS |
High EPSS 1.52% |
<= 0.109.0 | No fix yet |
| PYSEC-2024-38 python-multipart vulnerable to Content-Type Header ReDoS |
High EPSS 1.52% |
< 0.109.1 | 0.109.1 |
| GHSA-8h2j-cgx8-6xv7 Cross-Site Request Forgery (CSRF) in FastAPI |
High EPSS 0.72% |
< 0.65.2 | 0.65.2 |
| GHSA-8h2j-cgx8-6xv7 Cross-Site Request Forgery (CSRF) in FastAPI |
High EPSS 0.72% |
< 0.65.2 | 0.65.2 |
Source: https://github.com/fastapi/fastapi
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor