Debian dla-4711 : python3-starlette - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4711 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4711-1 [email protected]...

[SECURITY] [DLA 4711-1] starlette security update

Debian LTS Advisory DLA-4711-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert August 01, 2026 https://wiki.debian.org/LTS Package : starlette Version : 0.26.1-1+deb12u2 CVE ID : CVE-2026-48817 CVE-2026-54282 CVE-2026-54283 Debian Bug : 1140631 1140632 Multiple...

amarillo (>=0.0.15a3, <=0.0.16a1), ant31box (0.1.0) +48 more potentially affected by CVE-2026-54282 via starlette (0.35.1)

starlette PYPI version 0.35.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - amarillo =0.0.15a3, =0.10.163, =0.3.2, =1.0.0, =0.0.1, =0.4.8, =0.4.8, =0.0.9, =1.0.0, =0.109.0, =2.3.0, =2.3.1 and more Source cves:...

accidental-vulnerability (>=2.0.4, <=2.0.5), fastapi (>=0.1.19, <=0.5.1) potentially affected by CVE-2026-54282 via starlette (0.10.1)

starlette PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - accidental-vulnerability =2.0.4, =0.1.19, =0.5.1 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...

acex-api (>=0.0.1, <=0.1.4), adagio-server (>=0.1.0a1, <=0.1.5) +409 more potentially affected by CVE-2026-54282 via starlette (0.48.0)

starlette PYPI version 0.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - acex-api =0.0.1, =0.1.0a1, =3.2.0, =0.1.3, =0.2.0, =0.1.0, =0.1.0, =0.4.8b1, =1.4.0a20251203, =0.6.0a1, =0.3.0, =0.3.6, =0.4.7 and more Sourc...

beeai-cli (>=0.3.0rc4, <=0.3.4rc1), catweazle (>=1.0.0, <=1.0.2) +16 more potentially affected by CVE-2026-54282 via starlette (0.47.2)

starlette PYPI version 0.47.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - beeai-cli =0.3.0rc4, =1.0.0, =2.6.1, =1.3.0, =2.37.0, =1.2.5, =1.0.0, =0.12.4, =0.0.1, =1.0.0, =0.1.0, =0.1.34 and more Source cves:...

brave-mcp-langchain (>=0.1.0, <=0.2.0), bughunter-akabarki76 (0.3.24) +7 more potentially affected by CVE-2026-54282 via starlette (0.47.1)

starlette PYPI version 0.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - brave-mcp-langchain =0.1.0, =1.3.0rc1, =0.2.6, =0.3.0 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...

gerri (1.0.0), ia-planner-jerson (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2026-54282 via starlette (0.41.2)

starlette PYPI version 0.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - gerri 1.0.0 - ia-planner-jerson =0.1.0, =0.1.0, =1.6.52, =25.4.0, =0.5.4, =1.1.1, =0.0.74, =0.0.75 Source cves: CVE-2026-54282 Source advisor...

aio-fluid (>=1.1.0, <=1.2.3), aria-tools (0.0.1) +35 more potentially affected by CVE-2026-54282 via starlette (0.40.0)

starlette PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aio-fluid =1.1.0, =0.5.18, =0.3.0, =0.1.0, =0.1.0, =2.1.0, =0.1.1, =2.5.2, =2.64.3b0, =2.77.1 - fastapi 0.115.2 - fastapi-slim 0.115.2 and mo...

2025-assignment2-expenses-manager (>=0.1.1, <=0.1.7), academic-chatgpt (>=0.3.0, <=0.4.1) +729 more potentially affected by CVE-2026-54282 via starlette (0.50.0)

starlette PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - 2025-assignment2-expenses-manager =0.1.1, =0.3.0, =3.0.0, =1.0.1, =0.7.1, =0.2.0, =0.1.5, =0.5.0rc4, =0.0.6, =0.1.6, =1.0.0, =1.0.15 and more...

fast-point-api (>=0.1.0, <=1.0.0) potentially affected by CVE-2026-54282 via starlette (0.38.4)

starlette PYPI version 0.38.4 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - fast-point-api =0.1.0, =1.0.0 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...

abuse-whois (0.10.2), agent-assembly-line (0.0.1) +114 more potentially affected by CVE-2026-54282 via starlette (0.45.3)

starlette PYPI version 0.45.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.10.2 - agent-assembly-line 0.0.1 - ai2-scholar-qa =0.6.5, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.2.0, =1.0.0b0, =0.1.1, =0.1.23,...

ellar (>=0.4.7, <=0.6.8), esphome (>=2023.9.0b1, <=2023.12.9) +15 more potentially affected by CVE-2026-54282 via starlette (0.31.1)

starlette PYPI version 0.31.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - ellar =0.4.7, =2023.9.0b1, =0.1.0, =0.6.28rc2, =1.0.6, =0.4.0, =6.1.10, =0.0.6, =0.4.0, =0.1.29, =0.1.30 - starlette-hmac 0.0.1 -...

agent-os-py (>=0.0.1, <=0.1.1), agl-ocr-reader (1.1.1) +13 more potentially affected by CVE-2026-54282 via starlette (0.28.0)

starlette PYPI version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agent-os-py =0.0.1, =1.0.22, =0.4.4, =2023.8.0b1, =6.1.8, =0.1.25, =0.1.0a3, =0.1.0a11 Source cves: CVE-2026-54282 Source advisory:...

aas2openapi (>=0.2.0, <=0.2.4), abuse-whois (>=0.7.0, <=0.7.2) +880 more potentially affected by CVE-2026-54282 via starlette (0.27.0)

starlette PYPI version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aas2openapi =0.2.0, =0.7.0, =0.5.1.dev0, =1.11.0, =1.0.0, =0.1.0, =0.10.2, =0.2.0, =0.1.0, =0.1.0, =1.1.74b0, =1.3.155 and more Source cves:...

aac (>=0.1.10, <=0.3.22), aac-bom (>=0.0.1, <=0.0.4) +167 more potentially affected by CVE-2026-54282 via starlette (0.22.0)

starlette PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aac =0.1.10, =0.0.1, =1.8.15, =1.8.17, =0.1.0, =1.8.14, =0.1.0, =0.19.7, =0.8.2, =0.0.1, =0.0.4 and more Source cves: CVE-2026-54282 Source...

a7a1234 (1.0.0), alipcs-py (>=0.3.2, <=0.3.4) +39 more potentially affected by CVE-2026-54282 via starlette (0.21.0)

starlette PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - a7a1234 1.0.0 - alipcs-py =0.3.2, =1.3.12, =0.0.1, =0.27.3, =0.1.9, =2022.11.0, =0.1.6, =0.6.0a0, =1.2.1, =1.2.2 - fastapi-stack-utils 0.7.1...

agentverse (>=0.1.5, <=0.1.8), artemis-common (0.3.7b0) +84 more potentially affected by CVE-2026-54282 via starlette (0.26.1)

starlette PYPI version 0.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agentverse =0.1.5, =0.0.1, =0.9.0, =0.1.6, =0.0.1, =0.3.6, =1.1.0, =2023.6.0b1, =0.0.1, =0.1.5 and more Source cves: CVE-2026-54282 Source...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), abuse-whois (0.6.0) +77 more potentially affected by CVE-2026-54282 via starlette (0.25.0)

starlette PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aad-fastapi-dl37 =1.0.0, =0.1.1, =1.0.16, =1.17.0, =0.1.0, =0.2.1, =0.2.2, =0.1.0, =0.1.0, =0.1.1, =0.1.35, =0.1.50 and more Source cves:...

django-mathtext (0.0.1), ecowitt2mqtt (2023.2.0) +16 more potentially affected by CVE-2026-54282 via starlette (0.23.1)

starlette PYPI version 0.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - django-mathtext 0.0.1 - ecowitt2mqtt 2023.2.0 - ellar =0.3.0, =0.4.1, =0.6.23, =1.0.6a4, =0.2.4, =0.0.1, =0.1.0, =2024.8.8.post2, =2024.12.11...