PyPI/fastapi-guard CVE-2025-54365: high 7.5, EPSS 0.87%
FastAPI Guard has a regex bypass
Action: Upgrade fastapi-guard to 3.0.2 or later.
pip install fastapi-guard==3.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.1 | 3.0.2 | - |
Fixed versions
| 3.0.2 |
Sources
- osv: GHSA-rrf6-pxg8-684g
- nvd: CVE-2025-54365
- https://github.com/rennf93/fastapi-guard/security/advisories/GHSA-rrf6-pxg8-684g
- https://github.com/rennf93/fastapi-guard/commit/0829292c322d33dc14ab00c5451c5c138148035a
- https://github.com/rennf93/fastapi-guard/commit/d9d50e8130b7b434cdc1b001b8cfd03a06729f7f
- https://github.com/rennf93/fastapi-guard
CVE-2025-54365 · published · modified · JSON