Backend framework
FastAPI: latest release and open vulnerabilities today
The latest release of the fastapi package is 0.143.3. No advisories for the fastapi package were published in the last 12 months; none of its advisories is on CISA’s list of exploited vulnerabilities.
- Latest fastapi release
- 0.143.3
- GitHub stars
- 103.1k
- Licence
- MIT
Security advisories
No advisories published in the last 12 months. 2 in total since records began. Checked packages: fastapi.
Maintenance and supply chain
deps.dev has no OpenSSF Scorecard for this repository.
Production checklist
FastAPI production checklist: 6 checks before launch
- Should do: Restrict CORS to your own origins
- Should do: Declare request bodies and parameters with Pydantic models
- Should do: Protect private endpoints with a security dependency
Alternatives
Express.js
Minimal Node.js web framework
Strengths
- Lightweight and flexible
- Huge ecosystem
Trade-offs
- Minimal built-in features
- Manual setup required
Django
High-level Python web framework with batteries included
Strengths
- Comprehensive built-in features (ORM, admin, auth)
- Secure by default (CSRF, SQL injection protection)
Trade-offs
- Monolithic and opinionated
- Slower than lightweight frameworks
Ruby on Rails
Full-stack web framework emphasizing convention over configuration
Strengths
- Convention over configuration (rapid development)
- Rich ecosystem of gems (libraries)
Trade-offs
- Slower runtime performance than competitors
- Monolithic architecture can be restrictive
Spring Boot
Java framework for building production-ready applications
Strengths
- Enterprise-grade with robust ecosystem
- Comprehensive security and transaction management
Trade-offs
- Verbose compared to modern frameworks
- Steep learning curve for beginners
Example stacks with FastAPI
Docs and release notes
Check FastAPI in your own stack
This page checks FastAPI in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.