OPENSUSE-SU-2026:20975-1
Advisory lineage Upstream: 3 Downstream: 0
Published: 17 Jun 2026, 08:36
Last modified:24 Jun 2026, 18:24
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
17 Jun 2026, 08:36
Published
Vulnerability first disclosed
24 Jun 2026, 18:24
Last Modified
Vulnerability information updated
Description
Security update for python-starlette This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header validation poisons request.url.path, bypassing path-based security checks (bsc#1266369).
Affected Systems
- opensuse•python-starlette&distro=openSUSE Leap 16.0
< 0.41.3-160000.3.1