MGASA-2026-0327

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0327.html
Import Source
https://advisories.mageia.org/MGASA-2026-0327.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2026-0327
Upstream
Published
2026-08-09T06:02:53Z
Modified
2026-08-09T06:15:03.837250171Z
Summary
Updated python-starlette package fixes security vulnerabilities
Details

The updated package fixes security vulnerabilities: Proxy-Authorization header kept across hosts. (CVE-2024-28849) Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse. (CVE-2025-62727) Security restriction bypass via malformed HTTP Host header. (CVE-2026-48710)

References
Credits

Affected packages

Mageia:10 / python-starlette

Package

Name
python-starlette
Purl
pkg:rpm/mageia/python-starlette?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.46.0-3.1.mga10

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0327.json"