starlette
PyPIlatest 1.10.0 · 2026-10-24pypi.org · all 206 versions
Security advisories7
- starlette: Starlette has possible denial-of-service vector when parsing large files in multipart formsfixed in 0.47.2
- starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoSfixed in 1.3.1
- starlette: Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksfixed in 1.0.1
- starlette: Starlette Denial of service (DoS) via multipart/form-datafixed in 0.40.0
- starlette: Starlette: Unvalidated request path concatenated into authority poisons request.url.hostnamefixed in 1.3.0
Versions that change something
- 0.40.02024-10fixes 1 advisory
- 0.47.22025-07fixes 1 advisory
- 1.0.12026-05fixes 1 advisory
- 1.1.02026-05fixes 2 advisories