PyPI/starlette CVE-2026-54283: high 7.5, EPSS 0.48%
Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These limits are e
Action: Upgrade starlette to 1.3.1 or later.
pip install starlette==1.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.1 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
CVE-2026-54283 · published · modified · JSON