SUSE-SU-2026:22151-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 17 Jun 2026, 08:36
Last modified:24 Jun 2026, 18:24

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Jun 2026, 08:36
Published
Vulnerability first disclosed
24 Jun 2026, 18:24
Last Modified
Vulnerability information updated

Description

Security update for python-starlette This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header validation poisons request.url.path, bypassing path-based security checks (bsc#1266369).

Affected Systems

  • suse•python-starlette&distro=SUSE Linux Enterprise Server 16.0

    < 0.41.3-160000.3.1

  • suse•python-starlette&distro=SUSE Linux Enterprise Server for SAP applications 16.0

    < 0.41.3-160000.3.1

References (7)