CVE-2024-47874
UnscoredAdvisory
Published 15 Oct 2024In the index since 6 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- 0.0
- base score, highest
- EPSS
- 0.007
- 49th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 74
- of 17,781 indexed, latest versions
- Container images
- 83
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Starlette Denial of service (DoS) via multipart/form-data
Carried by container images the latest versions of 74 of 17,781 indexed charts deploy, on 83 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| starlettepypi | 0.13.6, 0.13.8, 0.14.1, 0.14.2+15 more | 0.40.0 | 83 |
- OSV records
- GHSA-f96h-pmfr-66vw
- Also known as
- PYSEC-2026-1943
Charts affected
74 by stars
Container images carrying it
83 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opea/ | 0c25aab3f106 | starlette | 0.40.0 | 4 |
| opea/ | 5c9639de61c1 | starlette | 0.40.0 | 2 |
| opea/ | e48613afb191 | starlette | 0.40.0 | 2 |
| opea/ | eb746b263705 | starlette | 0.40.0 | 2 |
| ghcr.io/ | fd8d3e6e4cdf | starlette | 0.40.0 | 2 |
| aibrix/ | 63fb81a64377 | starlette | 0.40.0 | 1 |
| aktosecurity/ | d4b100cbdc47 | starlette | 0.40.0 | 1 |
| aktosecurity/ | dbc566b2376c | starlette | 0.40.0 | 1 |
| allegroai/ | fca885e8cfc6 | starlette | 0.40.0 | 1 |
| archish27/ | 6610071a2101 | starlette | 0.40.0 | 1 |
| asdkant/ | a23d8bf7c885 | starlette | 0.40.0 | 1 |
| assistiot/ | 0fce3ea719a5 | starlette | 0.40.0 | 1 |
| assistiot/ | 792715dd3084 | starlette | 0.40.0 | 1 |
| assistiot/ | 30812ba93555 | starlette | 0.40.0 | 1 |
| cadmusthefounder/ | e596c5fbf80f | starlette | 0.40.0 | 1 |
| cdignam/ | 5a6a55b39cee | starlette | 0.40.0 | 1 |
| chaostoolkit/ | 734f3af86125 | starlette | 0.40.0 | 1 |
| chaostoolkit/ | 7f4a7eb9f7df | starlette | 0.40.0 | 1 |
| chaostoolkit/ | b95ba4961cfc | starlette | 0.40.0 | 1 |
| clowder/ | 11f3d844e4c0 | starlette | 0.40.0 | 1 |
| clowder/ | 14155326c7b9 | starlette | 0.40.0 | 1 |
| clowder/ | bf146f1ca24f | starlette | 0.40.0 | 1 |
| clsen2024/ | 0ba9eff852c5 | starlette | 0.40.0 | 1 |
| clsen2024/ | 51b1d45961cd | starlette | 0.40.0 | 1 |
| clsen2024/ | efb1586c8299 | starlette | 0.40.0 | 1 |
| codecov/ | 0475cb1c3136 | starlette | 0.40.0 | 1 |
| douz/ | 4384103d0219 | starlette | 0.40.0 | 1 |
| eclipseaerios/ | d4ed3d8e5db4 | starlette | 0.40.0 | 1 |
| eclipseaerios/ | b433c2b9f5dc | starlette | 0.40.0 | 1 |
| eclipseaerios/ | d582d39208c7 | starlette | 0.40.0 | 1 |
| eclipseaerios/ | 8ed2df4ca692 | starlette | 0.40.0 | 1 |
| esphome/ | 3f51ec10e823 | starlette | 0.40.0 | 1 |
| esphome/ | 9ab8cc88b28c | starlette | 0.40.0 | 1 |
| esphome/ | b2c6322700ac | starlette | 0.40.0 | 1 |
| esphome/ | def8b6e4f517 | starlette | 0.40.0 | 1 |
| evk02/ | ef6ff257ef35 | starlette | 0.40.0 | 1 |
| factly/ | ca5bc71d1d5c | starlette | 0.40.0 | 1 |
| hamidyousefi93/ | c34f071f6ed0 | starlette | 0.40.0 | 1 |
| hkotel/ | a7e6b6abe087 | starlette | 0.40.0 | 1 |
| john19968010/ | 31a90f6bd69c | starlette | 0.40.0 | 1 |
| langgenius/ | fca918260dd6 | starlette | 0.40.0 | 1 |
| lnbitsdocker/ | 26fae6327477 | starlette | 0.40.0 | 1 |
| lnbitsdocker/ | a11aaa6d2b21 | starlette | 0.40.0 | 1 |
| lsstsqre/ | 79b00fb67a65 | starlette | 0.40.0 | 1 |
| marcoimme/ | b6035c0721a8 | starlette | 0.40.0 | 1 |
| mintproject/ | 02260d20a21f | starlette | 0.40.0 | 1 |
| moreillon/ | bacb2ddd8394 | starlette | 0.40.0 | 1 |
| omkara25/ | 8327546c7aac | starlette | 0.40.0 | 1 |
| omkara25/ | afff40172b6b | starlette | 0.40.0 | 1 |
| omkara25/ | d62cba548580 | starlette | 0.40.0 | 1 |