CVE-2026-54283
2 advisories.
PyPI/starlette CVE-2026-54283: high 7.5
Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS
Action: Upgrade starlette to 1.3.1 or later.
pip install starlette==1.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.1 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
- osv: GHSA-82w8-qh3p-5jfq
- https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq
- https://github.com/Kludex/starlette
CVE-2026-54283 · published · modified · JSON
PyPI/starlette CVE-2026-54283: high 7.5
Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These limits are e
Action: Upgrade starlette to 1.3.1 or later.
pip install starlette==1.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.1 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
CVE-2026-54283 · published · modified · JSON