{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-07-20T15:03:09.339Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-07-20T15:01:18.334Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.28.0","releaseDate":"2026-02-20T00:00:00Z"}},"coverage":{"repositoryCount":30,"completeTreeCount":29,"incompleteTreeCount":1,"lockfileRepositoryCount":17,"sbomRepositoryCount":4,"artifactRepositoryCount":20,"resolvedRepositoryCount":29,"resolvedArtifactRepositoryCount":20,"dependencyFileCount":33,"parsedFileCount":32,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":4205,"metadataResolvedCount":4191,"metadataNotFoundCount":14,"osvEvaluatedVersionCount":4205,"codeRadarRepositoryCount":30},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":5000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":30,"packageCount":2831,"aiPackageCount":41,"resolvedComponentCount":7181,"resolvedVersionCount":4205,"providerExposureRepositoryCount":7,"licenseExpressionCount":57,"knownLicensePackageCount":2796,"unknownLicensePackageCount":35,"advisoryCount":572,"matchedAdvisoryRepositoryCount":25,"topPackage":{"id":"package:pypi:openai","slug":"openai-0dd26ac5","label":"OpenAI SDK","repositoryCount":18,"repositoryShare":0.6}},"kind":"paket","entity":{"id":"package:pypi:starlette","slug":"starlette-beb9e527","identity":"pypi:starlette","ecosystem":"pypi","name":"starlette","label":"starlette","category":null,"aiRelevant":false,"provider":null,"repositoryCount":9,"occurrenceCount":10,"directRepositoryCount":0,"versionCount":8,"licenseExpressions":["BSD-3-Clause"],"advisoryIds":["GHSA-2c2j-9gv5-cj73","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-f96h-pmfr-66vw","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"advisoryCount":8,"verifiedAttestation":true,"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.3.1"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["0.44.0"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["0.49.0"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["0.46.2"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["0.47.3"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["0.46.2"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["0.37.2"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["0.50.0"],"evidenceCount":1},{"id":"opencode:7788","slug":"opencode-7788","name":"Workshop Green LLM Usage","pathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","versions":["0.49.3"],"evidenceCount":1}],"versions":[{"version":"0.37.2","repositoryCount":1,"occurrenceCount":1,"ageDays":866,"advisoryIds":["GHSA-2c2j-9gv5-cj73","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-f96h-pmfr-66vw","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-03-05T16:16:50Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-2c2j-9gv5-cj73","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-f96h-pmfr-66vw","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-161","PYSEC-2026-1941","PYSEC-2026-1943","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249"],"links":[{"label":"HOMEPAGE","url":"https://github.com/encode/starlette"},{"label":"DOCUMENTATION","url":"https://www.starlette.io/"},{"label":"SOURCE_REPO","url":"https://github.com/encode/starlette"}],"relatedProjects":[{"id":"github.com/encode/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.44.0","repositoryCount":1,"occurrenceCount":1,"ageDays":569,"advisoryIds":["GHSA-2c2j-9gv5-cj73","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2024-12-28T07:32:53Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-2c2j-9gv5-cj73","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-161","PYSEC-2026-1941","PYSEC-2026-1942","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249"],"links":[{"label":"HOMEPAGE","url":"https://github.com/encode/starlette"},{"label":"DOCUMENTATION","url":"https://www.starlette.io/"},{"label":"SOURCE_REPO","url":"https://github.com/encode/starlette"}],"relatedProjects":[{"id":"github.com/encode/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.46.2","repositoryCount":2,"occurrenceCount":2,"ageDays":463,"advisoryIds":["GHSA-2c2j-9gv5-cj73","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-04-13T13:56:16Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-2c2j-9gv5-cj73","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-161","PYSEC-2026-1941","PYSEC-2026-1942","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249"],"links":[{"label":"HOMEPAGE","url":"https://github.com/encode/starlette"},{"label":"DOCUMENTATION","url":"https://www.starlette.io/"},{"label":"SOURCE_REPO","url":"https://github.com/encode/starlette"}],"relatedProjects":[{"id":"github.com/encode/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.47.3","repositoryCount":1,"occurrenceCount":1,"ageDays":330,"advisoryIds":["GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-08-24T13:36:40Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-161","PYSEC-2026-1942","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249"],"links":[{"label":"DOCUMENTATION","url":"https://www.starlette.io/"},{"label":"SOURCE_REPO","url":"https://github.com/encode/starlette"},{"label":"HOMEPAGE","url":"https://github.com/encode/starlette"}],"relatedProjects":[{"id":"github.com/encode/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"}],"attestations":[],"verifiedAttestation":false,"projectStatus":"active"}},{"version":"0.49.0","repositoryCount":1,"occurrenceCount":1,"ageDays":265,"advisoryIds":["GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-10-28T08:11:40Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-161","PYSEC-2026-1942","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/Kludex/starlette"},{"label":"HOMEPAGE","url":"https://github.com/Kludex/starlette"},{"label":"DOCUMENTATION","url":"https://starlette.dev/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/starlette/0.49.0/starlette-0.49.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/starlette/0.49.0/starlette-0.49.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/Kludex/starlette","commit":"7d88ea6f8ec8aa99cdb5fc7a10b88db5aadfdfee"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"0.49.3","repositoryCount":1,"occurrenceCount":1,"ageDays":260,"advisoryIds":["GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-11-01T15:12:24Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-161","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/Kludex/starlette"},{"label":"HOMEPAGE","url":"https://github.com/Kludex/starlette"},{"label":"DOCUMENTATION","url":"https://starlette.dev/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/starlette/0.49.3/starlette-0.49.3-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/starlette/0.49.3/starlette-0.49.3-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/Kludex/starlette","commit":"de3ffecaeadd34612f71495374f5853edbda1bf2"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"0.50.0","repositoryCount":1,"occurrenceCount":1,"ageDays":260,"advisoryIds":["GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c"],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2025-11-01T15:25:25Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":["GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","PYSEC-2026-161","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249"],"links":[{"label":"SOURCE_REPO","url":"https://github.com/Kludex/starlette"},{"label":"HOMEPAGE","url":"https://github.com/Kludex/starlette"},{"label":"DOCUMENTATION","url":"https://starlette.dev/"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/starlette/0.50.0/starlette-0.50.0-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/starlette/0.50.0/starlette-0.50.0-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/Kludex/starlette","commit":"4941b4a04993d087dea66e9287fe9472babee879"}],"verifiedAttestation":true,"projectStatus":"active"}},{"version":"1.3.1","repositoryCount":1,"occurrenceCount":2,"ageDays":38,"advisoryIds":[],"metadata":{"state":"resolved","checkedAt":"2026-07-20T03:19:50.101Z","publishedAt":"2026-06-12T09:23:10Z","deprecated":false,"deprecatedReason":null,"licenses":["BSD-3-Clause"],"advisoryIds":[],"links":[{"label":"HOMEPAGE","url":"https://github.com/Kludex/starlette"},{"label":"DOCUMENTATION","url":"https://starlette.dev/"},{"label":"SOURCE_REPO","url":"https://github.com/Kludex/starlette"},{"label":"ATTESTATION","url":"https://pypi.org/integrity/starlette/1.3.1/starlette-1.3.1-py3-none-any.whl/provenance"}],"relatedProjects":[{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"UNVERIFIED_METADATA"},{"id":"github.com/kludex/starlette","relationType":"SOURCE_REPO","relationProvenance":"PYPI_PUBLISH_ATTESTATION"}],"attestations":[{"type":"https://docs.pypi.org/attestations/publish/v1","url":"https://pypi.org/integrity/starlette/1.3.1/starlette-1.3.1-py3-none-any.whl/provenance","verified":true,"sourceRepository":"https://github.com/Kludex/starlette","commit":"8ebffd0678570ddd5d5bb11c6f3c3c7fd4682ab9"}],"verifiedAttestation":true,"projectStatus":"active"}}]},"evidence":{"occurrences":[{"id":"component:e03936394a25b2d3752412a7","repositoryId":"opencode:7674","repositorySlug":"opencode-7674","repositoryName":"Coding Agent Usage Simulation","repositoryPathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.49.0","versionKey":"pypi:starlette@0.49.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b1464cf01496db34285bf91f7841aed50559816","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/coding-agent-usage-simulation/-/blob/fe8ab81af4926a34c6cf1f3a807ffeda2b398f32/uv.lock","commitSha":"fe8ab81af4926a34c6cf1f3a807ffeda2b398f32"},{"id":"component:1149dce6b6530e1664629bb6","repositoryId":"opencode:5530","repositorySlug":"opencode-5530","repositoryName":"GSA Extraction","repositoryPathWithNamespace":"uba-ki-lab/gsa-extraction","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.46.2","versionKey":"pypi:starlette@0.46.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"fbb23733e647554b5678500b3f17f13bac7f77f5","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/gsa-extraction/-/blob/f5161e79d3f8c53877f9b1b0d72e1c10bff775ba/uv.lock","commitSha":"f5161e79d3f8c53877f9b1b0d72e1c10bff775ba"},{"id":"component:c4d10b3fd225b34d9c4ae6b1","repositoryId":"opencode:7781","repositorySlug":"opencode-7781","repositoryName":"kiva-llm-gateway","repositoryPathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.44.0","versionKey":"pypi:starlette@0.44.0","direct":null,"development":false,"sourceKind":"poetry-lock","filePath":"poetry.lock","blobSha":"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","sourceUrl":"https://gitlab.opencode.de/baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway/-/blob/4a5cd798be9b97cc1bff7b30d930eafda774e380/poetry.lock","commitSha":"4a5cd798be9b97cc1bff7b30d930eafda774e380"},{"id":"component:e2ad8e168e2e8845644addfd","repositoryId":"opencode:10787","repositorySlug":"opencode-10787","repositoryName":"LLM Questionnaire Benchmarking Framework","repositoryPathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.47.3","versionKey":"pypi:starlette@0.47.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"1b55661fee93d4733461df8e9c2b491b9205aac2","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-questionnaire-benchmarking-framework/-/blob/4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd/uv.lock","commitSha":"4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd"},{"id":"component:36c9d931132f37473f4b37e1","repositoryId":"opencode:5012","repositorySlug":"opencode-5012","repositoryName":"LLM Testframework","repositoryPathWithNamespace":"uba-ki-lab/llm-testframework","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.46.2","versionKey":"pypi:starlette@0.46.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"b4c29eab16a40db016821e4ea567956048a046ea","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/llm-testframework/-/blob/e8d6e99a1fa63b264e727acb553ed9b1499789b1/uv.lock","commitSha":"e8d6e99a1fa63b264e727acb553ed9b1499789b1"},{"id":"component:de3d312b0899fd8a954a8bc6","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"1.3.1","versionKey":"pypi:starlette@1.3.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-assistant-service/uv.lock","blobSha":"36b26ae58598809148cf87cffcc3b67380e8b928","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-assistant-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:81bfc56df8bbf0e1b171a761","repositoryId":"opencode:7202","repositorySlug":"opencode-7202","repositoryName":"MUCGPT","repositoryPathWithNamespace":"landeshauptstadt-muenchen/mucgpt","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"1.3.1","versionKey":"pypi:starlette@1.3.1","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"mucgpt-core-service/uv.lock","blobSha":"8bf6980137a09f5692c9e62798298a2cd9122a99","sourceUrl":"https://gitlab.opencode.de/landeshauptstadt-muenchen/mucgpt/-/blob/46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8/mucgpt-core-service/uv.lock","commitSha":"46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8"},{"id":"component:95a68e34fc9fce901940bf30","repositoryId":"opencode:4112","repositorySlug":"opencode-4112","repositoryName":"Objection management","repositoryPathWithNamespace":"uba-ki-lab/objection-management","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.37.2","versionKey":"pypi:starlette@0.37.2","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"8515db65670904208e99397a2d7878af759c74f3","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/objection-management/-/blob/5c1425bf9990cf12c5ae8ada47d249710703af18/uv.lock","commitSha":"5c1425bf9990cf12c5ae8ada47d249710703af18"},{"id":"component:08a17f42e7478de618b20f35","repositoryId":"opencode:10775","repositorySlug":"opencode-10775","repositoryName":"Ressource Efficient Computer Vision","repositoryPathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.50.0","versionKey":"pypi:starlette@0.50.0","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"047f47304acd18a48770c101f5a8383cd19bb134","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/ressource-efficient-computer-vision/-/blob/9aa07461b879a6161b7e901ea4c2a382b8f1b4ae/uv.lock","commitSha":"9aa07461b879a6161b7e901ea4c2a382b8f1b4ae"},{"id":"component:4c4358d7d03d6d1cdbf1bb6c","repositoryId":"opencode:7788","repositorySlug":"opencode-7788","repositoryName":"Workshop Green LLM Usage","repositoryPathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","ecosystem":"pypi","name":"starlette","identity":"pypi:starlette","version":"0.49.3","versionKey":"pypi:starlette@0.49.3","direct":null,"development":null,"sourceKind":"uv-lock","filePath":"uv.lock","blobSha":"bf2ad06a6324960d4a6a7a91340009e907848d0a","sourceUrl":"https://gitlab.opencode.de/uba-ki-lab/workshop-green-llm-usage/-/blob/d72ec94b58729e8b5e32caa9484867ec13add189/uv.lock","commitSha":"d72ec94b58729e8b5e32caa9484867ec13add189"}],"occurrenceCount":10},"related":{"repositories":[{"id":"opencode:7202","slug":"opencode-7202","name":"MUCGPT","pathWithNamespace":"landeshauptstadt-muenchen/mucgpt","versions":["1.3.1"],"evidenceCount":2},{"id":"opencode:7781","slug":"opencode-7781","name":"kiva-llm-gateway","pathWithNamespace":"baden-wuerttemberg/innenministerium/kiva.platform/kiva-llm-gateway","versions":["0.44.0"],"evidenceCount":1},{"id":"opencode:7674","slug":"opencode-7674","name":"Coding Agent Usage Simulation","pathWithNamespace":"uba-ki-lab/coding-agent-usage-simulation","versions":["0.49.0"],"evidenceCount":1},{"id":"opencode:5530","slug":"opencode-5530","name":"GSA Extraction","pathWithNamespace":"uba-ki-lab/gsa-extraction","versions":["0.46.2"],"evidenceCount":1},{"id":"opencode:10787","slug":"opencode-10787","name":"LLM Questionnaire Benchmarking Framework","pathWithNamespace":"uba-ki-lab/llm-questionnaire-benchmarking-framework","versions":["0.47.3"],"evidenceCount":1},{"id":"opencode:5012","slug":"opencode-5012","name":"LLM Testframework","pathWithNamespace":"uba-ki-lab/llm-testframework","versions":["0.46.2"],"evidenceCount":1},{"id":"opencode:4112","slug":"opencode-4112","name":"Objection management","pathWithNamespace":"uba-ki-lab/objection-management","versions":["0.37.2"],"evidenceCount":1},{"id":"opencode:10775","slug":"opencode-10775","name":"Ressource Efficient Computer Vision","pathWithNamespace":"uba-ki-lab/ressource-efficient-computer-vision","versions":["0.50.0"],"evidenceCount":1},{"id":"opencode:7788","slug":"opencode-7788","name":"Workshop Green LLM Usage","pathWithNamespace":"uba-ki-lab/workshop-green-llm-usage","versions":["0.49.3"],"evidenceCount":1}],"vulnerabilities":[{"id":"GHSA-2c2j-9gv5-cj73","slug":"ghsa-2c2j-9gv5-cj73-60bc1f35","dossier":false,"summary":"Starlette has possible denial-of-service vector when parsing large files in multipart forms","aliases":["CVE-2025-54121","PYSEC-2026-1941"],"sourceIds":["GHSA-2c2j-9gv5-cj73","PYSEC-2026-1941"],"published":"2025-07-21T19:34:23Z","modified":"2026-07-07T17:57:05.760766451Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/encode/starlette/security/advisories/GHSA-2c2j-9gv5-cj73"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54121"},{"type":"FIX","url":"https://github.com/encode/starlette/commit/9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1"},{"type":"PACKAGE","url":"https://github.com/encode/starlette"},{"type":"WEB","url":"https://github.com/encode/starlette/blob/fa5355442753f794965ae1af0f87f9fec1b9a3de/starlette/datastructures.py#L436C5-L447C14"},{"type":"WEB","url":"https://github.com/encode/starlette/discussions/2927#discussioncomment-13721403"},{"type":"PACKAGE","url":"https://pypi.org/project/starlette"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-2c2j-9gv5-cj73"}],"versionKeys":["pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-7f5h-v6xp-fcq8","slug":"ghsa-7f5h-v6xp-fcq8-9393173e","dossier":false,"summary":"Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``","aliases":["CVE-2025-62727","PYSEC-2026-1942"],"sourceIds":["GHSA-7f5h-v6xp-fcq8","PYSEC-2026-1942"],"published":"2025-10-28T20:38:01Z","modified":"2026-07-07T17:56:07.620081354Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/Kludex/starlette/security/advisories/GHSA-7f5h-v6xp-fcq8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62727"},{"type":"FIX","url":"https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5"},{"type":"INTRODUCED","url":"https://github.com/Kludex/starlette/commit/69ed26a85956ef4bd0161807eb27abf49be7cd3c"},{"type":"PACKAGE","url":"https://github.com/Kludex/starlette"},{"type":"WEB","url":"https://github.com/Kludex/starlette/releases/tag/0.49.1"},{"type":"PACKAGE","url":"https://pypi.org/project/starlette"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-7f5h-v6xp-fcq8"}],"versionKeys":["pypi:starlette@0.44.0","pypi:starlette@0.46.2","pypi:starlette@0.47.3","pypi:starlette@0.49.0"],"packageCount":1,"repositoryCount":5},{"id":"GHSA-82w8-qh3p-5jfq","slug":"ghsa-82w8-qh3p-5jfq-a05ef51e","dossier":false,"summary":"Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS","aliases":["CVE-2026-54283","PYSEC-2026-249"],"sourceIds":["GHSA-82w8-qh3p-5jfq","PYSEC-2026-249"],"published":"2026-06-15T20:39:53Z","modified":"2026-06-27T11:26:15.727496147Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"ADVISORY","url":"https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq"},{"type":"PACKAGE","url":"https://github.com/Kludex/starlette"}],"versionKeys":["pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2","pypi:starlette@0.47.3","pypi:starlette@0.49.0","pypi:starlette@0.49.3","pypi:starlette@0.50.0"],"packageCount":1,"repositoryCount":8},{"id":"GHSA-86qp-5c8j-p5mr","slug":"ghsa-86qp-5c8j-p5mr-13e563cb","dossier":false,"summary":"Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks","aliases":["CVE-2026-48710","PYSEC-2026-161","X41-2026-002"],"sourceIds":["GHSA-86qp-5c8j-p5mr","PYSEC-2026-161"],"published":"2026-05-22T13:10:03Z","modified":"2026-07-10T12:45:24.283227548Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48710"},{"type":"FIX","url":"https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6"},{"type":"WEB","url":"https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette"},{"type":"ARTICLE","url":"https://www.secwest.net/starlette"},{"type":"WEB","url":"https://www.cve.org/CVERecord?id=CVE-2026-48710"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48710.json"},{"type":"WEB","url":"https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml"},{"type":"PACKAGE","url":"https://github.com/Kludex/starlette"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2481742"},{"type":"DETECTION","url":"https://badhost.org/"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-48710"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:37275"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:34532"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2026:34526"},{"type":"ARTICLE","url":"https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette/"},{"type":"ADVISORY","url":"https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette/"}],"versionKeys":["pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2","pypi:starlette@0.47.3","pypi:starlette@0.49.0","pypi:starlette@0.49.3","pypi:starlette@0.50.0"],"packageCount":1,"repositoryCount":8},{"id":"GHSA-f96h-pmfr-66vw","slug":"ghsa-f96h-pmfr-66vw-6763f20e","dossier":false,"summary":"Starlette Denial of service (DoS) via multipart/form-data","aliases":["CVE-2024-47874","PYSEC-2026-1943"],"sourceIds":["GHSA-f96h-pmfr-66vw","PYSEC-2026-1943"],"published":"2024-10-15T18:12:57Z","modified":"2026-07-07T17:57:05.823442628Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47874"},{"type":"FIX","url":"https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733"},{"type":"PACKAGE","url":"https://github.com/encode/starlette"},{"type":"PACKAGE","url":"https://pypi.org/project/starlette"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-f96h-pmfr-66vw"}],"versionKeys":["pypi:starlette@0.37.2"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-jp82-jpqv-5vv3","slug":"ghsa-jp82-jpqv-5vv3-4d50530e","dossier":false,"summary":"Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname","aliases":["CVE-2026-54282","PYSEC-2026-248"],"sourceIds":["GHSA-jp82-jpqv-5vv3","PYSEC-2026-248"],"published":"2026-06-15T20:38:08Z","modified":"2026-07-15T22:30:44.498280076Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/Kludex/starlette/security/advisories/GHSA-jp82-jpqv-5vv3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54282"},{"type":"PACKAGE","url":"https://github.com/Kludex/starlette"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-248.yaml"}],"versionKeys":["pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2","pypi:starlette@0.47.3","pypi:starlette@0.49.0","pypi:starlette@0.49.3","pypi:starlette@0.50.0"],"packageCount":1,"repositoryCount":8},{"id":"GHSA-wqp7-x3pw-xc5r","slug":"ghsa-wqp7-x3pw-xc5r-4caabf81","dossier":false,"summary":"Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows","aliases":["CVE-2026-48818","PYSEC-2026-2281"],"sourceIds":["GHSA-wqp7-x3pw-xc5r","PYSEC-2026-2281"],"published":"2026-06-15T20:16:30Z","modified":"2026-07-13T07:26:44.976412482Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r"},{"type":"PACKAGE","url":"https://github.com/Kludex/starlette"},{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2026-48818"},{"type":"WEB","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30087"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30088"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:30089"},{"type":"ADVISORY","url":"https://github.com/Kludex/starlette/releases/tag/1.1.0"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490020"},{"type":"FIX","url":"https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5"},{"type":"FIX","url":"https://github.com/Kludex/starlette/pull/3287"}],"versionKeys":["pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2","pypi:starlette@0.47.3","pypi:starlette@0.49.0","pypi:starlette@0.49.3","pypi:starlette@0.50.0"],"packageCount":1,"repositoryCount":8},{"id":"GHSA-x746-7m8f-x49c","slug":"ghsa-x746-7m8f-x49c-c0349d3f","dossier":false,"summary":"Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`","aliases":["CVE-2026-48817","PYSEC-2026-2280"],"sourceIds":["GHSA-x746-7m8f-x49c","PYSEC-2026-2280"],"published":"2026-06-15T20:16:05Z","modified":"2026-07-13T07:26:54.069698774Z","checkedAt":"2026-07-20T15:03:09.339Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"references":[{"type":"ADVISORY","url":"https://github.com/Kludex/starlette/security/advisories/GHSA-x746-7m8f-x49c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48817"},{"type":"PACKAGE","url":"https://github.com/Kludex/starlette"},{"type":"ADVISORY","url":"https://github.com/Kludex/starlette/releases/tag/1.1.0"}],"versionKeys":["pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2","pypi:starlette@0.47.3","pypi:starlette@0.49.0","pypi:starlette@0.49.3","pypi:starlette@0.50.0"],"packageCount":1,"repositoryCount":8}]}}