Upgrading starlette 0.48 to 0.49
Review needed0.48.0 → 0.49.3Security1New3Changed1Fixed3
SecurityHigh · CVSS 7.5Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``GHSA-7f5h-v6xp-fcq8 · CVE-2025-62727 ↗
Review neededUpgrade verdict
1 changed default and a security fix.
In plain terms
- Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
Must act 1 item needs code or config changes
What you must change
Security1
Starlette vulnerable to O(n^2) DoS via Range header merging in `
High · CVSS 7.5starlette.responses.FileResponse`