pypi fastapi-api-key vulnerabilities

Latest pypi fastapi-api-key CVEs

Newest publication first

1. CVE-2026-23996 FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection

   Published 2026-01-21

   Low·CVSS 3.7 EPSS 0.29%

   FastAPI Api Key provides a backend-agnostic library that provides an API key system. Version 1.1.0 has a timing side-channel vulnerability in verify_key(). The method applied a random delay only on verification failures, allowing an attacker to statistically distinguish valid fro...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.