Launch Week Day 1: Announcing Security Design Review
Start for Free
pypi

starlette

View on pypi registry
12 Total advisories
12 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 6.5
PyPI

CVE-2026-48710

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
UNKNOWN
PyPI

CVE-2026-48710

BadHost: Missing Host header validation poisons request.url.path, bypassing path-based security checks
HIGH 7.5
PyPI

CVE-2025-62727

Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
HIGH 7.5
PyPI

CVE-2023-30798

MultipartParser denial of service with too many fields or files
LOW 3.7
PyPI

CVE-2023-29159

Starlette has Path Traversal vulnerability in StaticFiles
MEDIUM 5.3
PyPI

CVE-2025-54121

Starlette has possible denial-of-service vector when parsing large files in multipart forms
HIGH 7.5
PyPI

GHSA-93gm-qmq6-w238

Duplicate Advisory: Starlette Content-Type Header ReDoS
NONE 0.0
PyPI

CVE-2024-47874

Starlette Denial of service (DoS) via multipart/form-data
HIGH 7.5
PyPI

GHSA-qj8w-rv5x-2v9h

Duplicate Advisory: Starlette vulnerable to directory traversal
HIGH 7.5
PyPI

GHSA-3qj8-93xh-pwh2

Duplicate Advisory: Starlette allows an unauthenticated and remote attacker to specify any number of form fields or files
UNKNOWN
PyPI

CVE-2023-30798

CVE-2023-30798
UNKNOWN
PyPI

CVE-2023-29159

CVE-2023-29159

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes