Debian/starlette: high 7.5
Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These limits are e
Action: Upgrade starlette to 0.46.1-3+deb13u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.46.1-3+deb13u3 | - |
Fixed versions
| 0.46.1-3+deb13u3 |
Sources
- osv: DEBIAN-CVE-2026-54283#Debian:13/starlette
- https://security-tracker.debian.org/tracker/CVE-2026-54283
published · modified · JSON