python-starlette vulnerabilities (Mageia)
6 vulnerabilities.
-
python-starletteMageia Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS 7.5 High -
python-starletteMageia Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname 3.7 Low -
python-starletteMageia Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` 5.3 Medium -
python-starletteMageia Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks 6.5 Medium -
python-starletteMageia Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse 7.5 High -
python-starletteMageia Proxy-Authorization header kept across hosts in follow-redirects 6.5 Medium