{"api_version":"v1","generated_at":"2026-10-08T12:20:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-kludex-starlette-25fb84a1f64d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/starlette","name":"starlette","next_cursor":null,"observations":[{"affected":">= 0.4.1, < 1.3.1","affected_versions_present":true,"cve_id":"CVE-2026-54283","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54283","fixed":"For more information visit https://access.redhat.com/errata/RHSA-2026:61627","last_modified":"2026-06-23T16:10:51.227Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-54283","primary_source":"","published":"2026-06-22T16:46:16.706Z"},{"affected":"< 1.3.0","affected_versions_present":true,"cve_id":"CVE-2026-54282","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-54282","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-22T17:26:58.637Z","patch_url":"https://github.com/Kludex/starlette/security/advisories/GHSA-jp82-jpqv-5vv3","primary_source":"","published":"2026-06-22T16:45:01.629Z"},{"affected":"< 1.1.0","affected_versions_present":true,"cve_id":"CVE-2026-48817","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-48817","fixed":"1.1.0.","last_modified":"2026-06-18T13:54:23.221Z","patch_url":"https://github.com/Kludex/starlette/security/advisories/GHSA-x746-7m8f-x49c","primary_source":"","published":"2026-06-17T19:48:03.441Z"},{"affected":"< 1.1.0","affected_versions_present":true,"cve_id":"CVE-2026-48818","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-48818","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-08-04T17:45:37.864Z","patch_url":"https://github.com/Kludex/starlette/pull/3287","primary_source":"","published":"2026-06-17T17:50:12.399Z"},{"affected":"starlette: < 1.0.1","affected_versions_present":true,"cve_id":"CVE-2026-48710","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-48710","fixed":"RHSA-2026:30089: Red Hat AI Inference Server 3.3","last_modified":"2026-10-01T17:41:26.242Z","patch_url":"https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6","primary_source":"","published":"2026-05-26T21:54:54.393Z"},{"affected":">= 0.39.0, < 0.49.1","affected_versions_present":true,"cve_id":"CVE-2025-62727","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-62727","fixed":"For more information visit https://access.redhat.com/errata/RHSA-2025:23080","last_modified":"2025-11-04T17:41:42.316Z","patch_url":"https://access.redhat.com/security/cve/CVE-2025-62727","primary_source":"","published":"2025-10-28T20:14:53.655Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Kludex"}}