CVE-2025-62727: Inefficient Algorithmic Complexity

🗓️ 28 Oct 2025 00:00:00Reported by Rapid7Type

rapid7🔗 www.rapid7.com👁 1 Views

Unauthenticated DoS in Starlette 0.39.0-0.49.0 via quadratic-time Range header parsing.

Reporter	Title	Published	Views	Family All 133
IBM Security Bulletins	Security Bulletin: IBM watsonx.data integration has several vulnerabilities due to open source packages (CVE-2025-62727, CVE-2025-58754)	20 Mar 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: Starlette FileResponse Range Header Parsing DoS Vulnerability, affects watsonx.data	10 Feb 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection Component uses Starlette dependency which is vulnerable to CVE-2025-62727.	17 Mar 202606:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	29 Dec 202505:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow (traditional and containers) March 2026	27 Mar 202608:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub.	20 Jan 202611:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Starlette (CVE-2026-54283)	21 Sep 202608:01	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	19 Dec 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	29 Jan 202613:44	–	ibm
Chainguard	CVE-2025-62727 vulnerabilities	30 Oct 202514:22	–	cgr

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-62727

15 Apr 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00684

SSVC

Starlette Range header quadratic-time processing CPU exhaustion denial-of-service FileResponse