StackRadar

CVE-2025-54121

Medium

Advisory

Published 21 Jul 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
129
deployed by those charts
Fix available
1 of 1
affected package

Starlette has possible denial-of-service vector when parsing large files in multipart forms

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 129 images.

Affected packageAffected versionsFixed inImages
starlettepypi0.13.6, 0.13.8, 0.14.1, 0.14.2+23 more0.47.2129
OSV records
GHSA-2c2j-9gv5-cj73
Also known as
PYSEC-2026-1941

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
starlette@0.41.3
0.47.2

Open the chart page →

5,062
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
starlette@0.47.1
0.47.2

Open the chart page →

3,393
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
starlette@0.27.0
0.47.2

Open the chart page →

1,444
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
starlette@0.22.0
0.47.2

Open the chart page →

1,132
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
starlette@0.46.2
0.47.2

Open the chart page →

8,405
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
starlette@0.39.2
0.47.2

Open the chart page →

20,204
lightlyticslightlytics0.1.211 of 2See more

lightlytics lightlytics 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
starlette@0.41.3
0.47.2

Open the chart page →

5,354
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
starlette@0.19.1
0.47.2

Open the chart page →

1,949
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
starlette@0.17.1
0.47.2

Open the chart page →

2,078
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
starlette@0.17.1
0.47.2

Open the chart page →

7,315
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
starlette@0.45.3
0.47.2

Open the chart page →

5,823
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
starlette@0.20.4
0.47.2

Open the chart page →

43,341
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
starlette@0.13.6
0.47.2

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
starlette@0.19.1
0.47.2

Open the chart page →

8,556
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
starlette@0.26.1
0.47.2

Open the chart page →

967
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
starlette@0.22.0
0.47.2

Open the chart page →

5,456
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
starlette@0.41.3
0.47.2

Open the chart page →

7,310
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
starlette@0.35.1
0.47.2

Open the chart page →

2,298
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
starlette@0.46.2
0.47.2

Open the chart page →

18,922
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.016 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

16 of the 40 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-server:latestce1132261523
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
starlette@0.46.2
0.47.2
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
starlette@0.46.2
0.47.2

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
starlette@0.46.2
0.47.2

Open the chart page →

6,583
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
starlette@0.40.0
0.47.2

Open the chart page →

5,706
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
starlette@0.46.2
0.47.2

Open the chart page →

16,196
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
starlette@0.41.3
0.47.2

Open the chart page →

3,332
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
starlette@0.19.1
0.47.2

Open the chart page →

2,983
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
sharanalwar/redchef-backend:latest8d3cab80df49
starlette@0.27.0
0.47.2

Open the chart page →

4,763
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
starlette@0.14.2
0.47.2

Open the chart page →

2,201
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
starlette@0.35.1
0.47.2

Open the chart page →

7,431
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.01 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
starlette@0.41.3
0.47.2

Open the chart page →

3,781
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
starlette@0.40.0
0.47.2

Open the chart page →

9,607
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
starlette@0.37.2
0.47.2

Open the chart page →

3,312
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
starlette@0.36.3
0.47.2

Open the chart page →

3,512
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
starlette@0.36.3
0.47.2

Open the chart page →

4,718
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
starlette@0.46.2
0.47.2

Open the chart page →

3,707
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
starlette@0.27.0
0.47.2

Open the chart page →

3,887
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
starlette@0.14.2
0.47.2

Open the chart page →

2,770
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
starlette@0.37.2
0.47.2

Open the chart page →

5,565
horcruxstakewise1.0.11 of 1See more

horcrux stakewise 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
starlette@0.13.6
0.47.2

Open the chart page →

1,421
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
starlette@0.27.0
0.47.2

Open the chart page →

13,390
take-the-helmtake-the-helm0.1.01 of 1See more

take-the-helm take-the-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
starlette@0.19.1
0.47.2

Open the chart page →

805
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
starlette@0.38.5
0.47.2

Open the chart page →

4,393
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
starlette@0.38.5
0.47.2
opea/embedding-tei:1.05c9639de61c1
starlette@0.38.5
0.47.2
opea/llm-tgi:1.00c25aab3f106
starlette@0.38.5
0.47.2
opea/reranking-tei:1.0e48613afb191
starlette@0.38.5
0.47.2
opea/retriever-redis:1.0eb746b263705
starlette@0.38.5
0.47.2

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
starlette@0.38.5
0.47.2
opea/llm-tgi:1.00c25aab3f106
starlette@0.38.5
0.47.2

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
starlette@0.38.5
0.47.2
opea/llm-tgi:1.00c25aab3f106
starlette@0.38.5
0.47.2

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
starlette@0.38.5
0.47.2
opea/llm-docsum-tgi:1.002f9e8fa5d71
starlette@0.38.5
0.47.2

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
starlette@0.38.5
0.47.2

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
starlette@0.38.5
0.47.2

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
starlette@0.38.5
0.47.2

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
starlette@0.38.5
0.47.2

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
starlette@0.38.5
0.47.2

Open the chart page →

5,198

Container images carrying it

129 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
starlette@0.39.2
0.47.2
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
starlette@0.41.0
0.47.2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
starlette@0.37.2
0.47.2
1
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-server:latestce1132261523
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
starlette@0.46.2
0.47.2
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
starlette@0.46.2
0.47.2
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
starlette@0.17.1
0.47.2
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
starlette@0.46.2
0.47.2
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
starlette@0.27.0
0.47.2
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
starlette@0.41.3
0.47.2
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
starlette@0.46.2
0.47.2
1
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
starlette@0.41.3
0.47.2
1
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
starlette@0.41.3
0.47.2
1
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
starlette@0.13.6
0.47.2
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
starlette@0.14.2
0.47.2
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
starlette@0.14.2
0.47.2
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
starlette@0.14.2
0.47.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.