asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-54282 via starlette (0.42.0)

starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...