Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Starlette (CVE-2026-48817, CVE-2026-48818)

Summary Multiple vulnerabilities in the Starlette ASGI framework CVE-2026-48817, CVE-2026-48818 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 1.3.1. Vulnerability Details CVEID:CVE-2026-48817 DESCRIPTION: Starlette is a lightweight ASGI...

Debian dla-4711 : python3-starlette - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4711 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4711-1 [email protected]...

[SECURITY] [DLA 4711-1] starlette security update

Debian LTS Advisory DLA-4711-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert August 01, 2026 https://wiki.debian.org/LTS Package : starlette Version : 0.26.1-1+deb12u2 CVE ID : CVE-2026-48817 CVE-2026-54282 CVE-2026-54283 Debian Bug : 1140631 1140632 Multiple...

CVE-2026-48817

creationtimestamp| type| source ---|---|--- 2026-06-17 23:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojh4tpt4r27...

abuse-whois (0.2.0), ackack (0.1.0) +166 more potentially affected by CVE-2026-48817 via starlette (0.17.1)

starlette PYPI version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - abuse-whois 0.2.0 - ackack 0.1.0 - aiondao =0.1.0, =0.1.0a0, =0.3.0, =0.14.3, =0.1.13, =0.14.0, =0.1.0a5, =0.1.0, =0.1.0, =0.1.1, =0.1.1,...

a2 (>=0.1.0, <=0.3.17), abotserver (>=2022.0.0rc1, <=2022.0.0rc3) +170 more potentially affected by CVE-2026-48817 via starlette (0.19.1)

starlette PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - a2 =0.1.0, =2022.0.0rc1, =0.3.0, =0.1.0, =0.0.1, =0.3.0, =1.1.0, =1.8.5, =0.0.1, =0.3.1, =0.15.0, =0.5.0, =0.0.1, =0.0.10 - authx-lite 0.0.1...

axdocsystem (>=0.1.2, <=0.1.52), columbus (>=0.1.0, <=0.1.9) +10 more potentially affected by CVE-2026-48817 via starlette (0.24.0)

starlette PYPI version 0.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - axdocsystem =0.1.2, =0.1.0, =2.0.7, =0.0.31, =0.1.2, =1.0.1rc1, =0.2.4, =5.3.0b1, =5.3.0b2 Source cves: CVE-2026-48817 Source advisory:...

aad-fastapi-dl37 (>=1.0.0, <=1.0.2), abuse-whois (0.6.0) +77 more potentially affected by CVE-2026-48817 via starlette (0.25.0)

starlette PYPI version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aad-fastapi-dl37 =1.0.0, =0.1.1, =1.0.16, =1.17.0, =0.1.0, =0.2.1, =0.2.2, =0.1.0, =0.1.0, =0.1.1, =0.1.35, =0.1.50 and more Source cves:...

auditize (>=0.2.1, <=0.2.4), otto-m8-backend (>=0.0.3, <=0.0.4) +3 more potentially affected by CVE-2026-48817 via starlette (0.38.5)

starlette PYPI version 0.38.5 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditize =0.2.1, =0.0.3, =0.0.0, =0.1.0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

360solutions-bc-mcp (>=0.5.3, <=0.5.6), agent-pbx (>=2.1.0, <=2.1.1) +58 more potentially affected by CVE-2026-48817 via starlette (>=1.0.0rc1, <=1.0.1)

starlette PYPI version =1.0.0rc1, =0.5.3, =2.1.0, =1.1.0, =1.3.3, =0.17.0b2, =0.1.0, =7.2.0, =0.21.0, =1.5.0, =1.9.13, =0.1.3a0, =0.1.3a1 - eopf 2.8.1 - fast-agent-acp 0.7.13 and more Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

mlservicewrapper-host-http (>=0.1.0a0, <=0.5.0a0) potentially affected by CVE-2026-48817 via starlette (0.13.7)

starlette PYPI version 0.13.7 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - mlservicewrapper-host-http =0.1.0a0, =0.5.0a0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

agentverse (>=0.1.5, <=0.1.8), artemis-common (0.3.7b0) +84 more potentially affected by CVE-2026-48817 via starlette (0.26.1)

starlette PYPI version 0.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agentverse =0.1.5, =0.0.1, =0.9.0, =0.1.6, =0.0.1, =0.3.6, =1.1.0, =2023.6.0b1, =0.0.1, =0.1.5 and more Source cves: CVE-2026-48817 Source...

aas2openapi (>=0.2.0, <=0.2.4), abuse-whois (>=0.7.0, <=0.7.2) +882 more potentially affected by CVE-2026-48817 via starlette (0.27.0)

starlette PYPI version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - aas2openapi =0.2.0, =0.7.0, =0.5.1.dev0, =1.11.0, =1.0.0, =0.1.0, =0.10.2, =0.2.0, =0.1.0, =0.1.0, =1.1.74b0, =1.3.155 and more Source cves:...

agent-os-py (>=0.0.1, <=0.1.1), agl-ocr-reader (1.1.1) +13 more potentially affected by CVE-2026-48817 via starlette (0.28.0)

starlette PYPI version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agent-os-py =0.0.1, =1.0.22, =0.4.4, =2023.8.0b1, =6.1.8, =0.1.25, =0.1.0a3, =0.1.0a11 Source cves: CVE-2026-48817 Source advisory:...

ellar (>=0.4.7, <=0.6.8), esphome (>=2023.9.0b1, <=2023.12.9) +15 more potentially affected by CVE-2026-48817 via starlette (0.31.1)

starlette PYPI version 0.31.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - ellar =0.4.7, =2023.9.0b1, =0.1.0, =0.6.28rc2, =1.0.6, =0.4.0, =6.1.10, =0.0.6, =0.4.0, =0.1.29, =0.1.30 - starlette-hmac 0.0.1 -...

fast-point-api (>=0.1.0, <=1.0.0) potentially affected by CVE-2026-48817 via starlette (0.38.4)

starlette PYPI version 0.38.4 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - fast-point-api =0.1.0, =1.0.0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

brave-mcp-langchain (>=0.1.0, <=0.2.0), bughunter-akabarki76 (0.3.24) +7 more potentially affected by CVE-2026-48817 via starlette (0.47.1)

starlette PYPI version 0.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - brave-mcp-langchain =0.1.0, =1.3.0rc1, =0.2.6, =0.3.0 Source cves: CVE-2026-48817 Source advisory: OSV:PYSEC-2026-2280...

auditize (>=0.8.0, <=0.9.0), bindu (>=2026.20.2, <=2026.21.1) +24 more potentially affected by CVE-2026-48817 via starlette (0.49.1)

starlette PYPI version 0.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - auditize =0.8.0, =2026.20.2, =1.0.3, =0.9.2, =0.0.2, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =0.0.2, =0.6.0, =7.0.4, =0.5.1, =0.8.0 -...

2025-assignment2-expenses-manager (>=0.1.1, <=0.1.7), academic-chatgpt (>=0.3.0, <=0.4.1) +728 more potentially affected by CVE-2026-48817 via starlette (0.50.0)

starlette PYPI version 0.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - 2025-assignment2-expenses-manager =0.1.1, =0.3.0, =3.0.0, =1.0.1, =0.7.1, =0.2.0, =0.1.5, =0.5.0rc4, =0.0.6, =0.1.6, =1.0.0, =1.0.15 and more...

acex-api (>=0.0.1, <=0.1.4), adagio-server (>=0.1.0a1, <=0.1.3) +410 more potentially affected by CVE-2026-48817 via starlette (0.48.0)

starlette PYPI version 0.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - acex-api =0.0.1, =0.1.0a1, =3.2.0, =0.1.3, =0.2.0, =0.1.0, =0.1.0, =0.4.8b1, =1.4.0a20251203, =0.6.0a1, =0.3.0, =0.3.6, =0.4.7 and more Sourc...