CVE-2021-32677HIGHCVSS 8.2fixed in fastapi 0.70.0-1 (bookworm)2021
CVE-2021-32677 [HIGH] CVE-2021-32677: fastapi - FastAPI is a web framework for building APIs with Python 3.6+ based on standard ...
FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery (CSRF) attack. In versions lower than 0.65.2, FastAPI would try to read the request p
debian