— PyPI
PYSEC-2023-48 · CVE-2023-30798, GHSA-74m5-2c7w-9w3x Modified: 10/28/2024
package
PyPI / starlette
pkg:pypi/starlette
— PyPI
PYSEC-2023-83 · CVE-2023-29159, GHSA-v5gw-mw7f-84px Modified: 11/8/2023
— PyPI
PYSEC-2026-161 · CVE-2026-48710, GHSA-86qp-5c8j-p5mr BadHost: Missing Host header validation poisons request.url.path, bypassing path-based security checks
Modified: 5/26/2026
MEDIUM 5.3 PyPI
GHSA-2c2j-9gv5-cj73 · CVE-2025-54121 Starlette has possible denial-of-service vector when parsing large files in multipart forms
Modified: 2/4/2026
HIGH 7.5 PyPI
GHSA-74m5-2c7w-9w3x · CVE-2023-30798, PYSEC-2023-48 MultipartParser denial of service with too many fields or files
Modified: 3/16/2026
HIGH 7.5 PyPI
GHSA-7f5h-v6xp-fcq8 · CVE-2025-62727 Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
Modified: 5/11/2026
— 0.0 PyPI
GHSA-f96h-pmfr-66vw · CVE-2024-47874 Starlette Denial of service (DoS) via multipart/form-data
Modified: 2/4/2026
LOW 3.7 PyPI
GHSA-v5gw-mw7f-84px · CVE-2023-29159, PYSEC-2023-83 Starlette has Path Traversal vulnerability in StaticFiles
Modified: 3/13/2026