{"action":"Upgrade starlette to 0.27.0 or later.","affected":[{"fixed":"0.27.0","introduced":"0.13.5"}],"component":"starlette","cve_ids":["CVE-2023-29159"],"ecosystem":"PyPI","epss":0.02049,"exploited":false,"fixed_versions":["0.27.0"],"ghsa_id":"GHSA-v5gw-mw7f-84px","id":"tcs_01M5KFZ97CGHC533JCSYV87D1R","modified_at":"2026-07-08T06:53:10.504182631Z","published_at":"2023-05-17T03:49:14Z","references":["https://osv.dev/vulnerability/GHSA-v5gw-mw7f-84px","https://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px","https://nvd.nist.gov/vuln/detail/CVE-2023-29159","https://github.com/encode/starlette/commit/1797de464124b090f10cf570441e8292936d63e3","https://github.com/encode/starlette","https://github.com/encode/starlette/blob/4bab981d9e870f6cee1bd4cd59b87ddaf355b2dc/starlette/staticfiles.py#L172-L174","https://github.com/encode/starlette/releases/tag/0.27.0","https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2023-83.yaml","https://jvn.jp/en/jp/JVN95981715"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-v5gw-mw7f-84px","url":"https://osv.dev/vulnerability/GHSA-v5gw-mw7f-84px"}],"summary":"Starlette has Path Traversal vulnerability in StaticFiles"}