<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: fastapi-guard</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-54365: fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect </title><link>https://patchthecve.com/cve/CVE-2025-54365.html</link><guid>https://patchthecve.com/cve/CVE-2025-54365.html</guid><pubDate>Wed, 17 Jun 2026 09:39:55 +0000</pubDate><description>HIGH 7.5: fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this li</description></item><item><title>CVE-2025-53539: FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and det</title><link>https://patchthecve.com/cve/CVE-2025-53539.html</link><guid>https://patchthecve.com/cve/CVE-2025-53539.html</guid><pubDate>Wed, 17 Jun 2026 09:38:24 +0000</pubDate><description>HIGH 7.5: FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. fastapi-guard&#x27;s penetration attempts detection uses regex to scan incoming requests. However, some of the regex patterns used in detection are extremely inefficient</description></item><item><title>CVE-2025-46814: FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and det</title><link>https://patchthecve.com/cve/CVE-2025-46814.html</link><guid>https://patchthecve.com/cve/CVE-2025-46814.html</guid><pubDate>Wed, 17 Jun 2026 09:26:58 +0000</pubDate><description>LOW 3.4: FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially injec</description></item></channel></rss>