Skip to content
OpenAdvisories

Package · Debian

starlette

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-54282

    Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname

    Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating {scheme}://{host}{path} and re-parsing the result, a path t…

    Kludex starlette starlette starlette Debian Ubuntu PyPI