CLSA-2026-1769040755 TuxCare security update for starlette (3 CVEs)

TuxCare rebuilt starlette to address 3 CVEs. Fixed in 0.13.6.post2+tuxcare...

Regular Expression Denial of Service (ReDoS)

Overview starlette is a The little ASGI library that shines. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the FileResponse.parserangeheader method. An attacker can exhaust server CPU resources by sending a specially crafted HTTP Range header...