ROOT-APP-PYPI-CVE-2026-54282 CVE-2026-54282 in rootio-starlette - Patched by Root

Root has patched CVE-2026-54282 in the rootio-starlette package for Root:PyPI. Multiple fixed versions available...

DEBIAN-CVE-2026-54282

Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating scheme://hostpath and re-parsing the result, a path that does not begin with / for example...