Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Starlette (CVE-2026-48817, CVE-2026-48818)

Summary Multiple vulnerabilities in the Starlette ASGI framework CVE-2026-48817, CVE-2026-48818 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 1.3.1. Vulnerability Details CVEID:CVE-2026-48817 DESCRIPTION: Starlette is a lightweight ASGI...

Debian dla-4711 : python3-starlette - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4711 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4711-1 [email protected]...

[SECURITY] [DLA 4711-1] starlette security update

Debian LTS Advisory DLA-4711-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert August 01, 2026 https://wiki.debian.org/LTS Package : starlette Version : 0.26.1-1+deb12u2 CVE ID : CVE-2026-48817 CVE-2026-54282 CVE-2026-54283 Debian Bug : 1140631 1140632 Multiple...

CVE-2026-48817

creationtimestamp| type| source ---|---|--- 2026-06-17 23:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojh4tpt4r27...

abuse-whois (0.2.0), ackack (0.1.0) +166 more potentially affected by CVE-2026-48817 via starlette (0.17.1)

starlette PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.2.0 - ackack 0.1.0 - aiondao =0.1.0, =0.1.0a0, =0.3.0, =0.14.3, =0.1.13, =0.14.0, =0.1.0a5, =0.1.0, =0.1.0, =0.1.1, =0.1.1,...

ellar (>=0.4.7, <=0.6.8), esphome (>=2023.9.0b1, <=2023.12.9) +15 more potentially affected by CVE-2026-48817 via starlette (0.31.1)

starlette PYPI version 0.31.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - ellar =0.4.7, =2023.9.0b1, =0.1.0, =0.6.28rc2, =1.0.6, =0.4.0, =6.1.10, =0.0.6, =0.4.0, =0.1.29, =0.1.30 - starlette-hmac 0.0.1 -...

aio-fluid (>=1.1.0, <=1.2.3), aria-tools (0.0.1) +35 more potentially affected by CVE-2026-48817 via starlette (0.40.0)

starlette PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aio-fluid =1.1.0, =0.5.18, =0.3.0, =0.1.0, =0.1.0, =2.1.0, =0.1.1, =2.5.2, =2.64.3b0, =2.77.1 - fastapi 0.115.2 - fastapi-slim 0.115.2 and mo...

fast-point-api (>=0.1.0, <=1.0.0) potentially affected by CVE-2026-48817 via starlette (0.38.4)

starlette PYPI version 0.38.4 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - fast-point-api =0.1.0, =1.0.0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

auditorium (>=19.1.2, <=20.2.1), bbfcapi (>=1.0.0, <=1.0.1) +23 more potentially affected by CVE-2026-48817 via starlette (0.12.9)

starlette PYPI version 0.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditorium =19.1.2, =1.0.0, =0.8.0, =0.1.1, =0.0.1, =0.4.0, =0.41.0, =0.1.16, =0.1.29, =0.1.0, =0.0.2, =1.0.0b1, =0.1.1, =0.1.6 and more Sour...

brave-mcp-langchain (>=0.1.0, <=0.2.0), bughunter-akabarki76 (0.3.24) +7 more potentially affected by CVE-2026-48817 via starlette (0.47.1)

starlette PYPI version 0.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - brave-mcp-langchain =0.1.0, =1.3.0rc1, =0.2.6, =0.3.0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

a2 (>=0.1.0, <=0.3.17), abotserver (>=2022.0.0rc1, <=2022.0.0rc3) +170 more potentially affected by CVE-2026-48817 via starlette (0.19.1)

starlette PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - a2 =0.1.0, =2022.0.0rc1, =0.3.0, =0.1.0, =0.0.1, =0.3.0, =1.1.0, =1.8.5, =0.0.1, =0.3.1, =0.15.0, =0.5.0, =0.0.1, =0.0.10 - authx-lite 0.0.1...

auditize (>=0.2.1, <=0.2.4), otto-m8-backend (>=0.0.3, <=0.0.4) +3 more potentially affected by CVE-2026-48817 via starlette (0.38.5)

starlette PYPI version 0.38.5 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditize =0.2.1, =0.0.3, =0.0.0, =0.1.0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

agentverse (>=0.1.5, <=0.1.8), artemis-common (0.3.7b0) +84 more potentially affected by CVE-2026-48817 via starlette (0.26.1)

starlette PYPI version 0.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agentverse =0.1.5, =0.0.1, =0.9.0, =0.1.6, =0.0.1, =0.3.6, =1.1.0, =2023.6.0b1, =0.0.1, =0.1.5 and more Source cves: CVE-2026-48817 Source...

aas2openapi (>=0.2.0, <=0.2.4), abuse-whois (>=0.7.0, <=0.7.2) +882 more potentially affected by CVE-2026-48817 via starlette (0.27.0)

starlette PYPI version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aas2openapi =0.2.0, =0.7.0, =0.5.1.dev0, =1.11.0, =1.0.0, =0.1.0, =0.10.2, =0.2.0, =0.1.0, =0.1.0, =1.1.74b0, =1.3.155 and more Source cves:...

abuse-whois (0.4.1), adelecv (>=0.0.1, <=0.0.2) +140 more potentially affected by CVE-2026-48817 via starlette (0.20.4)

starlette PYPI version 0.20.4 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.4.1 - adelecv =0.0.1, =0.1.0, =1.3.81, =0.0.1, =0.1.2, =0.0.20, =0.4.0, =0.0.1, =0.16.0b1, =3.0.1, =3.2.0 and more Source cves:...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), abuse-whois (0.6.0) +77 more potentially affected by CVE-2026-48817 via starlette (0.25.0)

starlette PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aad-fastapi-dl37 =1.0.0, =0.1.1, =1.0.16, =1.17.0, =0.1.0, =0.2.1, =0.2.2, =0.1.0, =0.1.0, =0.1.1, =0.1.35, =0.1.50 and more Source cves:...

abuse-whois (0.10.2), agent-assembly-line (0.0.1) +113 more potentially affected by CVE-2026-48817 via starlette (0.45.3)

starlette PYPI version 0.45.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.10.2 - agent-assembly-line 0.0.1 - ai2-scholar-qa =0.6.5, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.2.0, =1.0.0b0, =0.1.1, =0.1.23,...

360solutions-bc-mcp (>=0.5.3, <=0.5.6), agent-pbx (>=2.1.0, <=2.1.1) +58 more potentially affected by CVE-2026-48817 via starlette (>=1.0.0rc1, <=1.0.1)

starlette PYPI version =1.0.0rc1, =0.5.3, =2.1.0, =1.1.0, =1.3.3, =0.17.0b2, =0.1.0, =7.2.0, =0.21.0, =1.5.0, =1.9.13, =0.1.3a0, =0.1.3a1 - eopf 2.8.1 - fast-agent-acp 0.7.13 and more Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

acex-api (>=0.0.1, <=0.1.4), adagio-server (>=0.1.0a1, <=0.1.3) +410 more potentially affected by CVE-2026-48817 via starlette (0.48.0)

starlette PYPI version 0.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - acex-api =0.0.1, =0.1.0a1, =3.2.0, =0.1.3, =0.2.0, =0.1.0, =0.1.0, =0.4.8b1, =1.4.0a20251203, =0.6.0a1, =0.3.0, =0.3.6, =0.4.7 and more Sourc...

mlservicewrapper-host-http (>=0.1.0a0, <=0.5.0a0) potentially affected by CVE-2026-48817 via starlette (0.13.7)

starlette PYPI version 0.13.7 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - mlservicewrapper-host-http =0.1.0a0, =0.5.0a0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...