[{"data":1,"prerenderedAt":633},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-starlette-beb9e527":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":320,"related":383},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T15:03:09.339Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T15:01:18.334Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":83,"category":84,"aiRelevant":46,"provider":84,"repositoryCount":85,"occurrenceCount":86,"directRepositoryCount":38,"versionCount":87,"licenseExpressions":88,"advisoryIds":90,"advisoryCount":87,"verifiedAttestation":99,"repositories":100,"versions":164},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","pypi","starlette",null,9,10,8,[89],"BSD-3-Clause",[91,92,93,94,95,96,97,98],"GHSA-2c2j-9gv5-cj73","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-f96h-pmfr-66vw","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c",true,[101,109,116,123,130,137,143,150,157],{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":106,"evidenceCount":108},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[107],"1.3.1",2,{"id":110,"slug":111,"name":112,"pathWithNamespace":113,"versions":114,"evidenceCount":32},"opencode:7781","opencode-7781","kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",[115],"0.44.0",{"id":117,"slug":118,"name":119,"pathWithNamespace":120,"versions":121,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[122],"0.49.0",{"id":124,"slug":125,"name":126,"pathWithNamespace":127,"versions":128,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[129],"0.46.2",{"id":131,"slug":132,"name":133,"pathWithNamespace":134,"versions":135,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[136],"0.47.3",{"id":138,"slug":139,"name":140,"pathWithNamespace":141,"versions":142,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[129],{"id":144,"slug":145,"name":146,"pathWithNamespace":147,"versions":148,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[149],"0.37.2",{"id":151,"slug":152,"name":153,"pathWithNamespace":154,"versions":155,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[156],"0.50.0",{"id":158,"slug":159,"name":160,"pathWithNamespace":161,"versions":162,"evidenceCount":32},"opencode:7788","opencode-7788","Workshop Green LLM Usage","uba-ki-lab\u002Fworkshop-green-llm-usage",[163],"0.49.3",[165,196,211,225,239,264,283,301],{"version":149,"repositoryCount":32,"occurrenceCount":32,"ageDays":166,"advisoryIds":167,"metadata":168},866,[91,93,94,95,96,97,98],{"state":169,"checkedAt":170,"publishedAt":171,"deprecated":46,"deprecatedReason":84,"licenses":172,"advisoryIds":173,"links":181,"relatedProjects":190,"attestations":194,"verifiedAttestation":46,"projectStatus":195},"resolved","2026-07-20T03:19:50.101Z","2024-03-05T16:16:50Z",[89],[91,93,94,95,96,97,98,174,175,176,177,178,179,180],"PYSEC-2026-161","PYSEC-2026-1941","PYSEC-2026-1943","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249",[182,185,188],{"label":183,"url":184},"HOMEPAGE","https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"label":186,"url":187},"DOCUMENTATION","https:\u002F\u002Fwww.starlette.io\u002F",{"label":189,"url":184},"SOURCE_REPO",[191],{"id":192,"relationType":189,"relationProvenance":193},"github.com\u002Fencode\u002Fstarlette","UNVERIFIED_METADATA",[],"active",{"version":115,"repositoryCount":32,"occurrenceCount":32,"ageDays":197,"advisoryIds":198,"metadata":199},569,[91,92,93,94,96,97,98],{"state":169,"checkedAt":170,"publishedAt":200,"deprecated":46,"deprecatedReason":84,"licenses":201,"advisoryIds":202,"links":204,"relatedProjects":208,"attestations":210,"verifiedAttestation":46,"projectStatus":195},"2024-12-28T07:32:53Z",[89],[91,92,93,94,96,97,98,174,175,203,177,178,179,180],"PYSEC-2026-1942",[205,206,207],{"label":183,"url":184},{"label":186,"url":187},{"label":189,"url":184},[209],{"id":192,"relationType":189,"relationProvenance":193},[],{"version":129,"repositoryCount":108,"occurrenceCount":108,"ageDays":212,"advisoryIds":213,"metadata":214},463,[91,92,93,94,96,97,98],{"state":169,"checkedAt":170,"publishedAt":215,"deprecated":46,"deprecatedReason":84,"licenses":216,"advisoryIds":217,"links":218,"relatedProjects":222,"attestations":224,"verifiedAttestation":46,"projectStatus":195},"2025-04-13T13:56:16Z",[89],[91,92,93,94,96,97,98,174,175,203,177,178,179,180],[219,220,221],{"label":183,"url":184},{"label":186,"url":187},{"label":189,"url":184},[223],{"id":192,"relationType":189,"relationProvenance":193},[],{"version":136,"repositoryCount":32,"occurrenceCount":32,"ageDays":226,"advisoryIds":227,"metadata":228},330,[92,93,94,96,97,98],{"state":169,"checkedAt":170,"publishedAt":229,"deprecated":46,"deprecatedReason":84,"licenses":230,"advisoryIds":231,"links":232,"relatedProjects":236,"attestations":238,"verifiedAttestation":46,"projectStatus":195},"2025-08-24T13:36:40Z",[89],[92,93,94,96,97,98,174,203,177,178,179,180],[233,234,235],{"label":186,"url":187},{"label":189,"url":184},{"label":183,"url":184},[237],{"id":192,"relationType":189,"relationProvenance":193},[],{"version":122,"repositoryCount":32,"occurrenceCount":32,"ageDays":240,"advisoryIds":241,"metadata":242},265,[92,93,94,96,97,98],{"state":169,"checkedAt":170,"publishedAt":243,"deprecated":46,"deprecatedReason":84,"licenses":244,"advisoryIds":245,"links":246,"relatedProjects":255,"attestations":260,"verifiedAttestation":99,"projectStatus":195},"2025-10-28T08:11:40Z",[89],[92,93,94,96,97,98,174,203,177,178,179,180],[247,249,250,252],{"label":189,"url":248},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"label":183,"url":248},{"label":186,"url":251},"https:\u002F\u002Fstarlette.dev\u002F",{"label":253,"url":254},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F0.49.0\u002Fstarlette-0.49.0-py3-none-any.whl\u002Fprovenance",[256,258],{"id":257,"relationType":189,"relationProvenance":193},"github.com\u002Fkludex\u002Fstarlette",{"id":257,"relationType":189,"relationProvenance":259},"PYPI_PUBLISH_ATTESTATION",[261],{"type":262,"url":254,"verified":99,"sourceRepository":248,"commit":263},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","7d88ea6f8ec8aa99cdb5fc7a10b88db5aadfdfee",{"version":163,"repositoryCount":32,"occurrenceCount":32,"ageDays":265,"advisoryIds":266,"metadata":267},260,[93,94,96,97,98],{"state":169,"checkedAt":170,"publishedAt":268,"deprecated":46,"deprecatedReason":84,"licenses":269,"advisoryIds":270,"links":271,"relatedProjects":277,"attestations":280,"verifiedAttestation":99,"projectStatus":195},"2025-11-01T15:12:24Z",[89],[93,94,96,97,98,174,177,178,179,180],[272,273,274,275],{"label":189,"url":248},{"label":183,"url":248},{"label":186,"url":251},{"label":253,"url":276},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F0.49.3\u002Fstarlette-0.49.3-py3-none-any.whl\u002Fprovenance",[278,279],{"id":257,"relationType":189,"relationProvenance":193},{"id":257,"relationType":189,"relationProvenance":259},[281],{"type":262,"url":276,"verified":99,"sourceRepository":248,"commit":282},"de3ffecaeadd34612f71495374f5853edbda1bf2",{"version":156,"repositoryCount":32,"occurrenceCount":32,"ageDays":265,"advisoryIds":284,"metadata":285},[93,94,96,97,98],{"state":169,"checkedAt":170,"publishedAt":286,"deprecated":46,"deprecatedReason":84,"licenses":287,"advisoryIds":288,"links":289,"relatedProjects":295,"attestations":298,"verifiedAttestation":99,"projectStatus":195},"2025-11-01T15:25:25Z",[89],[93,94,96,97,98,174,177,178,179,180],[290,291,292,293],{"label":189,"url":248},{"label":183,"url":248},{"label":186,"url":251},{"label":253,"url":294},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F0.50.0\u002Fstarlette-0.50.0-py3-none-any.whl\u002Fprovenance",[296,297],{"id":257,"relationType":189,"relationProvenance":193},{"id":257,"relationType":189,"relationProvenance":259},[299],{"type":262,"url":294,"verified":99,"sourceRepository":248,"commit":300},"4941b4a04993d087dea66e9287fe9472babee879",{"version":107,"repositoryCount":32,"occurrenceCount":108,"ageDays":302,"advisoryIds":303,"metadata":304},38,[],{"state":169,"checkedAt":170,"publishedAt":305,"deprecated":46,"deprecatedReason":84,"licenses":306,"advisoryIds":307,"links":308,"relatedProjects":314,"attestations":317,"verifiedAttestation":99,"projectStatus":195},"2026-06-12T09:23:10Z",[89],[],[309,310,311,312],{"label":183,"url":248},{"label":186,"url":251},{"label":189,"url":248},{"label":253,"url":313},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F1.3.1\u002Fstarlette-1.3.1-py3-none-any.whl\u002Fprovenance",[315,316],{"id":257,"relationType":189,"relationProvenance":193},{"id":257,"relationType":189,"relationProvenance":259},[318],{"type":262,"url":313,"verified":99,"sourceRepository":248,"commit":319},"8ebffd0678570ddd5d5bb11c6f3c3c7fd4682ab9",{"occurrences":321,"occurrenceCount":86},[322,329,335,342,348,353,360,365,371,377],{"id":323,"repositoryId":117,"repositorySlug":118,"repositoryName":119,"repositoryPathWithNamespace":120,"ecosystem":82,"name":83,"identity":81,"version":122,"versionKey":324,"direct":84,"development":84,"sourceKind":325,"filePath":55,"blobSha":326,"sourceUrl":327,"commitSha":328},"component:e03936394a25b2d3752412a7","pypi:starlette@0.49.0","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":330,"repositoryId":124,"repositorySlug":125,"repositoryName":126,"repositoryPathWithNamespace":127,"ecosystem":82,"name":83,"identity":81,"version":129,"versionKey":331,"direct":84,"development":84,"sourceKind":325,"filePath":55,"blobSha":332,"sourceUrl":333,"commitSha":334},"component:1149dce6b6530e1664629bb6","pypi:starlette@0.46.2","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":336,"repositoryId":110,"repositorySlug":111,"repositoryName":112,"repositoryPathWithNamespace":113,"ecosystem":82,"name":83,"identity":81,"version":115,"versionKey":337,"direct":84,"development":46,"sourceKind":338,"filePath":56,"blobSha":339,"sourceUrl":340,"commitSha":341},"component:c4d10b3fd225b34d9c4ae6b1","pypi:starlette@0.44.0","poetry-lock","48f984e4d97ce607df0ee30b09a8e1e4c935e9db","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpoetry.lock","4a5cd798be9b97cc1bff7b30d930eafda774e380",{"id":343,"repositoryId":131,"repositorySlug":132,"repositoryName":133,"repositoryPathWithNamespace":134,"ecosystem":82,"name":83,"identity":81,"version":136,"versionKey":344,"direct":84,"development":84,"sourceKind":325,"filePath":55,"blobSha":345,"sourceUrl":346,"commitSha":347},"component:e2ad8e168e2e8845644addfd","pypi:starlette@0.47.3","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":349,"repositoryId":138,"repositorySlug":139,"repositoryName":140,"repositoryPathWithNamespace":141,"ecosystem":82,"name":83,"identity":81,"version":129,"versionKey":331,"direct":84,"development":84,"sourceKind":325,"filePath":55,"blobSha":350,"sourceUrl":351,"commitSha":352},"component:36c9d931132f37473f4b37e1","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":354,"repositoryId":102,"repositorySlug":103,"repositoryName":104,"repositoryPathWithNamespace":105,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":355,"direct":84,"development":84,"sourceKind":325,"filePath":356,"blobSha":357,"sourceUrl":358,"commitSha":359},"component:de3d312b0899fd8a954a8bc6","pypi:starlette@1.3.1","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-assistant-service\u002Fuv.lock","46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8",{"id":361,"repositoryId":102,"repositorySlug":103,"repositoryName":104,"repositoryPathWithNamespace":105,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":355,"direct":84,"development":84,"sourceKind":325,"filePath":362,"blobSha":363,"sourceUrl":364,"commitSha":359},"component:81bfc56df8bbf0e1b171a761","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-core-service\u002Fuv.lock",{"id":366,"repositoryId":144,"repositorySlug":145,"repositoryName":146,"repositoryPathWithNamespace":147,"ecosystem":82,"name":83,"identity":81,"version":149,"versionKey":367,"direct":84,"development":84,"sourceKind":325,"filePath":55,"blobSha":368,"sourceUrl":369,"commitSha":370},"component:95a68e34fc9fce901940bf30","pypi:starlette@0.37.2","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":372,"repositoryId":151,"repositorySlug":152,"repositoryName":153,"repositoryPathWithNamespace":154,"ecosystem":82,"name":83,"identity":81,"version":156,"versionKey":373,"direct":84,"development":84,"sourceKind":325,"filePath":55,"blobSha":374,"sourceUrl":375,"commitSha":376},"component:08a17f42e7478de618b20f35","pypi:starlette@0.50.0","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":378,"repositoryId":158,"repositorySlug":159,"repositoryName":160,"repositoryPathWithNamespace":161,"ecosystem":82,"name":83,"identity":81,"version":163,"versionKey":379,"direct":84,"development":84,"sourceKind":325,"filePath":55,"blobSha":380,"sourceUrl":381,"commitSha":382},"component:4c4358d7d03d6d1cdbf1bb6c","pypi:starlette@0.49.3","bf2ad06a6324960d4a6a7a91340009e907848d0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fblob\u002Fd72ec94b58729e8b5e32caa9484867ec13add189\u002Fuv.lock","d72ec94b58729e8b5e32caa9484867ec13add189",{"repositories":384,"vulnerabilities":403},[385,387,389,391,393,395,397,399,401],{"id":102,"slug":103,"name":104,"pathWithNamespace":105,"versions":386,"evidenceCount":108},[107],{"id":110,"slug":111,"name":112,"pathWithNamespace":113,"versions":388,"evidenceCount":32},[115],{"id":117,"slug":118,"name":119,"pathWithNamespace":120,"versions":390,"evidenceCount":32},[122],{"id":124,"slug":125,"name":126,"pathWithNamespace":127,"versions":392,"evidenceCount":32},[129],{"id":131,"slug":132,"name":133,"pathWithNamespace":134,"versions":394,"evidenceCount":32},[136],{"id":138,"slug":139,"name":140,"pathWithNamespace":141,"versions":396,"evidenceCount":32},[129],{"id":144,"slug":145,"name":146,"pathWithNamespace":147,"versions":398,"evidenceCount":32},[149],{"id":151,"slug":152,"name":153,"pathWithNamespace":154,"versions":400,"evidenceCount":32},[156],{"id":158,"slug":159,"name":160,"pathWithNamespace":161,"versions":402,"evidenceCount":32},[163],[404,437,466,481,532,558,580,615],{"id":91,"slug":405,"dossier":46,"summary":406,"aliases":407,"sourceIds":409,"published":410,"modified":411,"checkedAt":7,"severity":412,"references":416,"versionKeys":436,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[408,175],"CVE-2025-54121",[91,175],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[413],{"type":414,"score":415},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[417,420,423,426,428,430,432,434],{"type":418,"url":419},"WEB","https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":421,"url":422},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":424,"url":425},"FIX","https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":427,"url":184},"PACKAGE",{"type":418,"url":429},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":418,"url":431},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":427,"url":433},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":421,"url":435},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[367,337,331],{"id":92,"slug":438,"dossier":46,"summary":439,"aliases":440,"sourceIds":442,"published":443,"modified":444,"checkedAt":7,"severity":445,"references":448,"versionKeys":464,"packageCount":32,"repositoryCount":465},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[441,203],"CVE-2025-62727",[92,203],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[446],{"type":414,"score":447},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[449,451,453,455,458,459,461,462],{"type":418,"url":450},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":421,"url":452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":424,"url":454},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":456,"url":457},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":427,"url":248},{"type":418,"url":460},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":427,"url":433},{"type":421,"url":463},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[337,331,344,324],5,{"id":93,"slug":467,"dossier":46,"summary":468,"aliases":469,"sourceIds":471,"published":472,"modified":473,"checkedAt":7,"severity":474,"references":476,"versionKeys":480,"packageCount":32,"repositoryCount":87},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[470,180],"CVE-2026-54283",[93,180],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[475],{"type":414,"score":447},[477,479],{"type":421,"url":478},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":427,"url":248},[367,337,331,344,324,379,373],{"id":94,"slug":482,"dossier":46,"summary":483,"aliases":484,"sourceIds":487,"published":488,"modified":489,"checkedAt":7,"severity":490,"references":493,"versionKeys":531,"packageCount":32,"repositoryCount":87},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[485,174,486],"CVE-2026-48710","X41-2026-002",[94,174],"2026-05-22T13:10:03Z","2026-07-10T12:45:24.283227548Z",[491],{"type":414,"score":492},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[494,496,498,500,502,505,507,509,511,513,514,516,519,521,523,525,527,529],{"type":421,"url":495},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":421,"url":497},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":424,"url":499},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":418,"url":501},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":503,"url":504},"ARTICLE","https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":418,"url":506},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":418,"url":508},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":418,"url":510},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":418,"url":512},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":427,"url":248},{"type":418,"url":515},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":517,"url":518},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":418,"url":520},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":418,"url":522},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":418,"url":524},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34532",{"type":418,"url":526},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34526",{"type":503,"url":528},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":421,"url":530},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[367,337,331,344,324,379,373],{"id":95,"slug":533,"dossier":46,"summary":534,"aliases":535,"sourceIds":537,"published":538,"modified":539,"checkedAt":7,"severity":540,"references":546,"versionKeys":557,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[536,176],"CVE-2024-47874",[95,176],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[541,543],{"type":414,"score":542},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":544,"score":545},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[547,549,551,553,554,555],{"type":418,"url":548},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":421,"url":550},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":424,"url":552},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":427,"url":184},{"type":427,"url":433},{"type":421,"url":556},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[367],{"id":96,"slug":559,"dossier":46,"summary":560,"aliases":561,"sourceIds":563,"published":564,"modified":565,"checkedAt":7,"severity":566,"references":571,"versionKeys":579,"packageCount":32,"repositoryCount":87},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[562,179],"CVE-2026-54282",[96,179],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[567,569],{"type":414,"score":568},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":414,"score":570},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[572,574,576,577],{"type":421,"url":573},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":421,"url":575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":427,"url":248},{"type":418,"url":578},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[367,337,331,344,324,379,373],{"id":97,"slug":581,"dossier":46,"summary":582,"aliases":583,"sourceIds":585,"published":586,"modified":587,"checkedAt":7,"severity":588,"references":591,"versionKeys":614,"packageCount":32,"repositoryCount":87},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[584,178],"CVE-2026-48818",[97,178],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[589],{"type":414,"score":590},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[592,594,595,597,599,601,603,605,607,610,612],{"type":421,"url":593},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":427,"url":248},{"type":418,"url":596},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":418,"url":598},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":421,"url":600},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":421,"url":602},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":421,"url":604},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":421,"url":606},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":608,"url":609},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":424,"url":611},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":424,"url":613},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[367,337,331,344,324,379,373],{"id":98,"slug":616,"dossier":46,"summary":617,"aliases":618,"sourceIds":620,"published":621,"modified":622,"checkedAt":7,"severity":623,"references":625,"versionKeys":632,"packageCount":32,"repositoryCount":87},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[619,177],"CVE-2026-48817",[98,177],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[624],{"type":414,"score":570},[626,628,630,631],{"type":421,"url":627},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":421,"url":629},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":427,"url":248},{"type":421,"url":606},[367,337,331,344,324,379,373],1784560117278]