[SECURITY] Fedora 41 Update: python-starlette-0.42.0-3.fc41

🗓️ 07 Nov 2025 02:36:31Reported by FedoraType

fedora

fedora🔗 lists.fedoraproject.org👁 3 Views

Starlette is a lightweight async framework with WebSocket, tasks, events, and full tests.

Reporter	Title	Published	Views	Family All 62
IBM Security Bulletins	Security Bulletin: IBM watsonx.data integration has several vulnerabilities due to open source packages (CVE-2025-62727, CVE-2025-58754)	20 Mar 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: Starlette FileResponse Range Header Parsing DoS Vulnerability, affects watsonx.data	10 Feb 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection Component uses Starlette dependency which is vulnerable to CVE-2025-62727.	17 Mar 202606:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	29 Dec 202505:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow (traditional and containers) March 2026	27 Mar 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub.	20 Jan 202611:43	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	29 Jan 202613:44	–	ibm
Chainguard	CVE-2025-62727 vulnerabilities	30 Oct 202514:22	–	cgr
Circl	CVE-2025-62727	28 Oct 202517:35	–	circl

OS	OS Version	Architecture	Package	Package Version	Filename
Fedora Linux	41	any	python-starlette	0.42.0-3.fc41	python-starlette-0.42.0-3.fc41.noarch.rpm

07 Nov 2025 02:36Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

EPSS0.00068

SSVC

Starlette WebSocket support Background tasks Startup events Shutdown events Test coverage