CVE-2025-62727
2 advisories.
PyPI/starlette CVE-2025-62727: high 7.5
Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
Action: Upgrade starlette to 0.49.1 or later.
pip install starlette==0.49.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.39.0 | 0.49.1 | - |
Fixed versions
| 0.49.1 |
Sources
- osv: GHSA-7f5h-v6xp-fcq8
- https://github.com/Kludex/starlette/security/advisories/GHSA-7f5h-v6xp-fcq8
- https://nvd.nist.gov/vuln/detail/CVE-2025-62727
- https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5
- https://github.com/Kludex/starlette/commit/69ed26a85956ef4bd0161807eb27abf49be7cd3c
- https://github.com/Kludex/starlette
- https://github.com/Kludex/starlette/releases/tag/0.49.1
CVE-2025-62727 · published · modified · JSON
PyPI/starlette CVE-2025-62727: high 7.5
Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
Action: Upgrade starlette to 0.49.1 or later.
pip install starlette==0.49.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.39.0 | 0.49.1 | - |
Fixed versions
| 0.49.1 |
Sources
- osv: PYSEC-2026-1942
- https://github.com/Kludex/starlette/security/advisories/GHSA-7f5h-v6xp-fcq8
- https://nvd.nist.gov/vuln/detail/CVE-2025-62727
- https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5
- https://github.com/Kludex/starlette/commit/69ed26a85956ef4bd0161807eb27abf49be7cd3c
- https://github.com/Kludex/starlette
- https://github.com/Kludex/starlette/releases/tag/0.49.1
- https://pypi.org/project/starlette
- https://github.com/advisories/GHSA-7f5h-v6xp-fcq8
CVE-2025-62727 · published · modified · JSON