encode has 3 CVEs on record between 2022 and 2026. 1 was published in the last 90 days. The median CVSS is 7.4 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 33% vs 1% corpus
- Median CVSS
- 7.4
- Publish → KEV
- —(1)
- Last 90 days
- 1 prev 1
Weakness classes
Products
- django-rest-framework 1
- httpx 1
- starlette 1
Worst active — by depth score
CVE-2026-48710Medium· 6.5Starlette is a lightweight ASGI framework/toolkit75CVE-2021-41945Critical· 9.1Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.50CVE-2026-114137High· 7.4Django REST framework: TokenProxy.delete() reports success and revokes nothing41
encode vulnerabilities
CVEs affecting encode, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-114137High· 7.4Django REST framework: TokenProxy.delete() reports success and revokes nothing
Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses the proxy's user-id pk while the concrete Token token-string primary key identifies rows, …
CVE-2026-48710Medium· 6.5CISA KEVPoCStarlette is a lightweight ASGI framework/toolkit
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `…
CVE-2021-41945Critical· 9.1Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.
Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.