2 matches found
PYSEC-2026-248
Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...
5.3CVSS5.9AI score0.00273EPSS
SaveExploits0References1
EUVD-2026-38318
Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...
3.7CVSS6AI score0.00273EPSS
SaveExploits0References1
20