{"action":"Upgrade starlette to 0.25.0 or later.","affected":[{"fixed":"0.25.0","introduced":"0"}],"component":"starlette","cve_ids":["CVE-2023-30798"],"ecosystem":"PyPI","epss":0.01299,"exploited":false,"fixed_versions":["0.25.0"],"ghsa_id":"GHSA-74m5-2c7w-9w3x","id":"tcs_01M5KGKJN4YT3FKM4D0NT1QZ1Q","modified_at":"2024-10-28T15:41:59.716521Z","published_at":"2023-04-21T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-48","https://vulncheck.com/advisories/starlette-multipartparser-dos","https://github.com/encode/starlette/security/advisories/GHSA-74m5-2c7w-9w3x","https://github.com/encode/starlette/commit/8c74c2c8dba7030154f8af18e016136bea1938fa"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-48","url":"https://osv.dev/vulnerability/PYSEC-2023-48"}],"summary":"There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause ex"}