asgi-request-duration (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-54282 via starlette (0.43.0)

starlette PYPI version 0.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =1.0.0, =1.0.3 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...