MGASA-2026-0327 Updated python-starlette package fixes security vulnerabilities

🗓️ 09 Aug 2026 06:02:53Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Updated python-starlette fixes header leakage across hosts, DoS via Range header merging, and Host header bypass.

Reporter	Title	Published	Views	Family All 284
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for April 2024.	27 Apr 202413:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	16 May 202420:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure vulnerabilities affect IBM Business Automation Workflow - CVE-2024-28849, CVE-2024-21501	3 Jun 202411:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx.data integration has several vulnerabilities due to open source packages (CVE-2025-62727, CVE-2025-58754)	20 Mar 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in follow-redirects	26 Feb 202518:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM includes components with known vulnerabilities	12 Apr 202415:48	–	ibm
IBM Security Bulletins	Security Bulletin: Starlette FileResponse Range Header Parsing DoS Vulnerability, affects watsonx.data	10 Feb 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for May 2024 - Multiple CVEs addressed	1 Jul 202408:35	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in the follow-redirect module affects IBM Db2 Big SQL on Cloud Pak for Data	7 Jan 202520:55	–	ibm

Source	Link
advisories	www.advisories.mageia.org/MGASA-2026-0327.html
bugs	www.bugs.mageia.org/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HWLLKAJQCNBN46LPLDAYBM2FU65WBX72/
lists	www.lists.debian.org/debian-security-announce/2026/msg00213.html
github	www.github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp
lists	www.lists.opensuse.org/archives/list/[email protected]/message/FET4KWO46IN64G35ZF7HGJJBIM4OF3YC/

09 Aug 2026 06:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.5 - 7.5

EPSS0.01905

SSVC