StackRadar

CVE-2025-54121

Medium

Advisory

Published 21 Jul 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
129
deployed by those charts
Fix available
1 of 1
affected package

Starlette has possible denial-of-service vector when parsing large files in multipart forms

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 129 images.

Affected packageAffected versionsFixed inImages
starlettepypi0.13.6, 0.13.8, 0.14.1, 0.14.2+23 more0.47.2129
OSV records
GHSA-2c2j-9gv5-cj73
Also known as
PYSEC-2026-1941

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
starlette@0.38.5
0.47.2

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
starlette@0.38.5
0.47.2

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
starlette@0.38.5
0.47.2

Open the chart page →

5,350
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
starlette@0.37.2
0.47.2

Open the chart page →

1,515

Container images carrying it

129 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
lsstsqre/exposurelog:0.8.079b00fb67a65
starlette@0.17.1
0.47.2
1
marcoimme/oidcmock:latestb6035c0721a8
starlette@0.35.1
0.47.2
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
starlette@0.20.4
0.47.2
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
starlette@0.19.1
0.47.2
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
starlette@0.38.6
0.47.2
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
starlette@0.38.6
0.47.2
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
starlette@0.38.6
0.47.2
1
opea/asr:1.025dd26d9cd09
starlette@0.38.5
0.47.2
1
opea/chatqna:1.038c51b791efa
starlette@0.38.5
0.47.2
1
opea/codegen:1.058f91683892d
starlette@0.38.5
0.47.2
1
opea/codetrans:1.0e2436483b73d
starlette@0.38.5
0.47.2
1
opea/docsum:1.03eaa91849512
starlette@0.38.5
0.47.2
1
opea/guardrails-tgi:1.0262c6048aab8
starlette@0.38.5
0.47.2
1
opea/guardrails-tgi:latestf68bec6a1271
starlette@0.41.3
0.47.2
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
starlette@0.38.5
0.47.2
1
opea/speecht5:1.0249afad3d268
starlette@0.38.5
0.47.2
1
opea/tts:1.0257ae94709e9
starlette@0.38.5
0.47.2
1
opea/web-retriever-chroma:1.0fe08165d7770
starlette@0.38.5
0.47.2
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
starlette@0.46.2
0.47.2
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
starlette@0.41.2
0.47.2
1
opencsghq/csgship-agentic:v0.4.02cd29671a03e
starlette@0.41.2
0.47.2
1
openmined/syft-backend:0.9.5b72f74a68b32
starlette@0.45.3
0.47.2
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
starlette@0.36.3
0.47.2
1
phan2410/dummy-service:0.0.89c6ed6de26ca
starlette@0.40.0
0.47.2
1
salehmir/jesse:1.10.101afa95f979e9
starlette@0.37.2
0.47.2
1
sharanalwar/redchef-backend:latest8d3cab80df49
starlette@0.27.0
0.47.2
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
starlette@0.37.2
0.47.2
1
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
starlette@0.13.6
0.47.2
1
substratusai/verba:v0.4.0-baseURL261695be635eb
starlette@0.27.0
0.47.2
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
starlette@0.46.2
0.47.2
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
starlette@0.37.2
0.47.2
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
starlette@0.46.2
0.47.2
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
starlette@0.39.2
0.47.2
1
witcherek7/pav:0.0.342a744f29ac0
starlette@0.22.0
0.47.2
1
yetiplatform/yeti:2.9.09bcbe2650a14
starlette@0.46.2
0.47.2
1
yetiplatform/yeti:latest9c3006cedcca
starlette@0.46.2
0.47.2
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
starlette@0.47.1
0.47.2
1
zurdi15/romm:2.3.12db88fe44c89
starlette@0.27.0
0.47.2
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
starlette@0.37.2
0.47.2
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
starlette@0.41.3
0.47.2
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
starlette@0.41.3
0.47.2
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
starlette@0.46.2
0.47.2
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
starlette@0.46.2
0.47.2
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
starlette@0.17.1
0.47.2
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
starlette@0.41.3
0.47.2
1
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
starlette@0.27.0
0.47.2
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
starlette@0.37.2
0.47.2
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
starlette@0.46.0
0.47.2
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
starlette@0.41.2
0.47.2
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
starlette@0.36.3
0.47.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.