asgi-request-duration (>=0.1.0, <=0.1.1), starlette-authlib (>=0.3.5, <=0.3.6) potentially affected by CVE-2026-48710 via starlette (0.42.0)

starlette PYPI version 0.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - asgi-request-duration =0.1.0, =0.3.5, =0.3.6 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

halfapi (>=0.6.29, <=0.6.31), starlette-authlib (0.1.32) +1 more potentially affected by CVE-2026-48710 via starlette (0.33.0)

starlette PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - halfapi =0.6.29, =0.0.5, =0.0.6 Source cves: CVE-2026-48710 Source advisory: OSV:GHSA-86QP-5C8J-P5MR...

esmerald (1.2.3), htagweb (>=0.10.0, <=0.42.3) +3 more potentially affected by CVE-2026-48710 via starlette (0.29.0)

starlette PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - esmerald 1.2.3 - htagweb =0.10.0, =1.0.0, =1.0.1 - starlette-authlib 0.1.27 - starlette-bridge 0.2.0 Source cves: CVE-2026-48710 Source...

halfapi (>=0.6.29, <=0.6.31), starlette-authlib (0.1.32) +1 more potentially affected by CVE-2026-48710 via starlette (0.33.0)

starlette PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - halfapi =0.6.29, =0.0.5, =0.0.6 Source cves: CVE-2026-48710 Source advisory: OSV:PYSEC-2026-161...