PyPI/fastapi-admin CVE-2024-42816: medium 6.1, EPSS 0.29%

FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2026-1356
• https://nvd.nist.gov/vuln/detail/CVE-2024-42816
• https://github.com/fastapi-admin/fastapi-admin/issues/172
• https://fastapi-admin-pro.long2ice.io/admin/login
• https://github.com/fastapi-admin/fastapi-admin
• https://pypi.org/project/fastapi-admin
• https://github.com/advisories/GHSA-22xm-w7r2-834q

CVE-2024-42816 · published 2026-07-07T14:34:39.779143Z · modified 2026-07-07T17:47:35.905901957Z · JSON