StackRadar

CVE-2025-54121

Medium

Advisory

Published 21 Jul 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
129
deployed by those charts
Fix available
1 of 1
affected package

Starlette has possible denial-of-service vector when parsing large files in multipart forms

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 129 images.

Affected packageAffected versionsFixed inImages
starlettepypi0.13.6, 0.13.8, 0.14.1, 0.14.2+23 more0.47.2129
OSV records
GHSA-2c2j-9gv5-cj73
Also known as
PYSEC-2026-1941

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
starlette@0.38.5
0.47.2

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
starlette@0.38.5
0.47.2

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
starlette@0.38.5
0.47.2

Open the chart page →

5,350
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54121.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
starlette@0.37.2
0.47.2

Open the chart page →

1,515

Container images carrying it

129 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opea/llm-tgi:1.00c25aab3f106
starlette@0.38.5
0.47.2
4
quay.io/devtron/ai-agent:0.0.16545dac92173
starlette@0.40.0
0.47.2
3
opea/embedding-tei:1.05c9639de61c1
starlette@0.38.5
0.47.2
2
opea/reranking-tei:1.0e48613afb191
starlette@0.38.5
0.47.2
2
opea/retriever-redis:1.0eb746b263705
starlette@0.38.5
0.47.2
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
starlette@0.36.3
0.47.2
2
aibrix/metadata-service:v0.7.063fb81a64377
starlette@0.38.6
0.47.2
1
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
starlette@0.38.6
0.47.2
1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
starlette@0.38.6
0.47.2
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
starlette@0.26.1
0.47.2
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
starlette@0.46.2
0.47.2
1
archish27/python-fastapi-postgres:latest6610071a2101
starlette@0.19.1
0.47.2
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
starlette@0.14.2
0.47.2
1
assistiot/fl_repository:latest0fce3ea719a5
starlette@0.19.1
0.47.2
1
assistiot/fl_training_collector:latest792715dd3084
starlette@0.16.0
0.47.2
1
assistiot/open_api_backend:1.1.230812ba93555
starlette@0.27.0
0.47.2
1
bmeares/meerschaum:2.8.48e9c5bacaa82
starlette@0.45.3
0.47.2
1
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
starlette@0.19.1
0.47.2
1
cdignam/kodiak:v0.54.05a6a55b39cee
starlette@0.20.4
0.47.2
1
chaostoolkit/back:latest734f3af86125
starlette@0.13.8
0.47.2
1
chaostoolkit/front:latest7f4a7eb9f7df
starlette@0.14.1
0.47.2
1
chaostoolkit/middle:latestb95ba4961cfc
starlette@0.14.1
0.47.2
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
starlette@0.26.1
0.47.2
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
starlette@0.26.1
0.47.2
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
starlette@0.26.1
0.47.2
1
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
starlette@0.37.2
0.47.2
1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
starlette@0.37.2
0.47.2
1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
starlette@0.37.2
0.47.2
1
codecov/self-hosted-api:24.4.10475cb1c3136
starlette@0.36.2
0.47.2
1
douz/helpdesk:latest4384103d0219
starlette@0.19.1
0.47.2
1
dserio83/velero-api:0.3.16b3d9115fee2
starlette@0.45.3
0.47.2
1
dserio83/velero-watchdog:0.1.8d5deae589229
starlette@0.45.3
0.47.2
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
starlette@0.38.4
0.47.2
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
starlette@0.36.3
0.47.2
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
starlette@0.35.1
0.47.2
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
starlette@0.36.3
0.47.2
1
esphome/esphome:1.18.03f51ec10e823
starlette@0.14.2
0.47.2
1
esphome/esphome:2024.3.09ab8cc88b28c
starlette@0.35.1
0.47.2
1
esphome/esphome:2024.12.2b2c6322700ac
starlette@0.39.2
0.47.2
1
esphome/esphome:2025.3.0def8b6e4f517
starlette@0.39.2
0.47.2
1
evk02/mlflow:2.2.1ef6ff257ef35
starlette@0.22.0
0.47.2
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
starlette@0.20.4
0.47.2
1
hamidyousefi93/saam-test:latestc34f071f6ed0
starlette@0.27.0
0.47.2
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
starlette@0.19.1
0.47.2
1
john19968010/fastapi-template:latest31a90f6bd69c
starlette@0.26.1
0.47.2
1
knspar/phronetis:0.1.4609499d2dc91a
starlette@0.46.2
0.47.2
1
langgenius/dify-api:1.0.0066035f93856
starlette@0.41.0
0.47.2
1
langgenius/dify-api:0.6.11fca918260dd6
starlette@0.37.2
0.47.2
1
lnbitsdocker/lnbits-legend:latest26fae6327477
starlette@0.27.0
0.47.2
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
starlette@0.19.1
0.47.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.