MGASA-2026-0327

Advisory lineage Upstream: 3 Downstream: 0
Published: 09 Aug 2026, 06:02
Last modified:09 Aug 2026, 06:15

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Aug 2026, 06:02
Published
Vulnerability first disclosed
09 Aug 2026, 06:15
Last Modified
Vulnerability information updated

Description

Updated python-starlette package fixes security vulnerabilities The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. (CVE-2024-28849) Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse. (CVE-2025-62727) Security restriction bypass via malformed HTTP Host header. (CVE-2026-48710)

Affected Systems

  • mageia•python-starlette

    < 0.46.0-3.1.mga10

References (6)