TI-2025-38917 CVE-2025-62727 · GHSA-7f5h-v6xp-fcq8
Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse
Priority HIGH 72
Starlette is a lightweight ASGI framework/toolkit.
Kludex
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Kludex records in CISA KEVNo Kludex vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2026-30841 CVE-2026-42561 · GHSA-pp6c-gr5w-3c5g
Python-Multipart: Denial of Service via unbounded multipart part headers
Priority MEDIUM 40
Python-Multipart is a streaming multipart parser for Python.
TI-2024-36140 CVE-2024-53981 · GHSA-59g5-xgcq-4qw3
python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary
Priority MEDIUM 40
python-multipart is a streaming multipart parser for Python.