CVE-2026-54283
HighAdvisory
Published 15 Jun 2026In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.004
- 33rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 145
- of 17,781 indexed, latest versions
- Container images
- 176
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS
Carried by container images the latest versions of 145 of 17,781 indexed charts deploy, on 176 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| starlettepypi | 0.13.6, 0.13.8, 0.14.1, 0.14.2+32 more | 1.3.1 | 176 |
- OSV records
- GHSA-82w8-qh3p-5jfq
- Also known as
- PYSEC-2026-249
Charts affected
145 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| difydify-helmVerified publisher | 0.38.0 | 1 of 11See more | 22,002 |
| wazuhwazuh-helm-morgovedVerified publisher | 2.0.7 | 1 of 5See more | 11,384 |
| syftopenmined | 0.9.5 | 2 of 6See more | 17,245 |
| wazuhwazuh-helmVerified publisher | 0.0.8 | 1 of 4See more | 6,168 |
| openvpn-asas-helm-chartOfficialVerified publisher | 0.2.1 | 1 of 1See more | 2,668 |
| esphomegeek-cookbookVerified publisher | 8.4.2 | 1 of 1See more | 3,717 |
| mealiegeek-cookbookVerified publisher | 5.1.2 | 1 of 2See more | 7,579 |
| home-assistantk8s-home-lab-repo | 16.3.1 | 1 of 1See more | 4,634 |
| klancesklances | 0.1.4 | 1 of 1See more | 1,693 |
| mealieth-chartsVerified publisher | 0.5.1 | 1 of 1See more | 3,804 |
| clearml-servingallegroaiVerified publisher | 1.6.2 | 1 of 9See more | 17,877 |
| rommcrystalnetVerified publisher | 0.2.20 | 1 of 3See more | 1,944 |
| aibrixdanchevVerified publisher | 0.7.0 | 1 of 5See more | 5,274 |
| dominodominoVerified publisher | 0.1.11 | 1 of 3See more | 8,823 |
| fastapi-microservice-appfast-api-microservice-app | 1.3.0 | 3 of 4See more | 9,562 |
| helmuphelmupVerified publisher | 0.1.0 | 1 of 3See more | 16,514 |
| backendikusi-bk-chart | 1.0.3 | 2 of 3See more | 5,940 |
| immichimmich-helm | 0.3.0 | 1 of 4See more | 15,712 |
| jessejesse-chartVerified publisher | 0.0.46 | 1 of 6See more | 3,421 |
| jupyterhub-outpostjupyter-jscVerified publisher | 2.4.1 | 1 of 1See more | 1,678 |
| difykubeblocksVerified publisher | 0.5.1 | 1 of 5See more | 20,403 |
| kubeseal-webguikubeseal-webgui | 6.0.4 | 1 of 2See more | 4,095 |
| litellmlitellm-helm | 0.2.0 | 1 of 1See more | 4,292 |
| clowder2ncsaVerified publisher | 1.9.7 | 3 of 12See more | 37,373 |
| mealiertomik-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 3,929 |
| vuiseriohub | 1.0.6 | 2 of 3See more | 11,532 |
| slo-reportingslo-reportingVerified publisher | 0.3.34 | 1 of 2See more | 2,928 |
| tocktock | 0.6.3 | 1 of 9See more | 12,907 |
| airbyteairbyte-v2Verified publisher | 2.2.0 | 1 of 10See more | 12,473 |
| akto-ai-guardrails-v2akto | 0.3.0 | 2 of 6See more | 9,321 |
| esphomealekcVerified publisher | 2.8.1 | 1 of 1See more | 3,112 |
| esphomealexmorbo-esphomeVerified publisher | 1.0.0 | 1 of 1See more | 6,324 |
| ansible-inspecansible-inspec | 0.2.17 | 1 of 2See more | 5,558 |
| arlas-aiasarlas-stackVerified publisher | 28.8.0 | 1 of 22See more | 40,238 |
| flrepositorydbassist-iot-fl-repository | 1.1.0 | 1 of 2See more | 4,367 |
| trainingcollectorassist-iot-fl-training-collector | 1.1.0 | 1 of 1See more | 1,719 |
| openapiassist-iot-open-api-management | 0.2.2 | 1 of 6See more | 18,277 |
| azure-app-exporterazure-app-exporterVerified publisher | 0.4.2 | 1 of 2See more | 1,790 |
| backstage-pyactionsbackstage-pyactionsVerified publisher | 0.1.0 | 1 of 1See more | 2,738 |
| colosseumbook-k8sinfra-v2 | 1.0.18 | 1 of 5See more | 26,996 |
| ctk-walkthroughchaostoolkit-walkthrough | 0.1.0 | 3 of 3See more | 5,557 |
| chat-searchchat-searchVerified publisher | 0.1.7 | 1 of 1See more | 4,042 |
| galaxycloudve | 6.8.6 | 1 of 3See more | 4,601 |
| pbcore-utilcluster-deploy | 0.0.1 | 1 of 1See more | 9,128 |
| csghubcsghubVerified publisher | 2.4.3 | 2 of 34See more | 58,897 |
| csgshipcsghubVerified publisher | 0.4.6 | 1 of 10See more | 11,335 |
| deployhubdeployhubVerified publisher | 10.0.415 | 7 of 11See more | 11,160 |
| design-cataloguedesign-catalogue | 0.1.0 | 1 of 2See more | 2,770 |
| ai-agentdevtron | 0.0.1 | 1 of 1See more | 9,607 |
| ai-agentdevtron-labs | 0.0.1 | 1 of 1See more | 9,607 |
Container images carrying it
176 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| helmforge/ | 61f759a1421f | starlette | 1.3.1 | 1 |
| helmforge/ | fcb7017327d6 | starlette | 1.3.1 | 1 |
| hkotel/ | a7e6b6abe087 | starlette | 1.3.1 | 1 |
| intelowlproject/ | 0b22e547ea6b | starlette | 1.3.1 | 1 |
| john19968010/ | 31a90f6bd69c | starlette | 1.3.1 | 1 |
| jupyterjsc/ | aea53b13f235 | starlette | 1.3.1 | 1 |
| knspar/ | 09499d2dc91a | starlette | 1.3.1 | 1 |
| kyovint/ | 48c19e3ae9a3 | starlette | 1.3.1 | 1 |
| kyovint/ | 80084149156e | starlette | 1.3.1 | 1 |
| langgenius/ | 097d3fd27a7b | starlette | 1.3.1 | 1 |
| langgenius/ | 066035f93856 | starlette | 1.3.1 | 1 |
| langgenius/ | fca918260dd6 | starlette | 1.3.1 | 1 |
| litellm/ | 09b217802ded | starlette | 1.3.1 | 1 |
| lnbitsdocker/ | 26fae6327477 | starlette | 1.3.1 | 1 |
| lnbitsdocker/ | a11aaa6d2b21 | starlette | 1.3.1 | 1 |
| lsstsqre/ | 79b00fb67a65 | starlette | 1.3.1 | 1 |
| marcoimme/ | b6035c0721a8 | starlette | 1.3.1 | 1 |
| mawad98/ | 99422c56a274 | starlette | 1.3.1 | 1 |
| memgraph/ | ecdf7faea3f7 | starlette | 1.3.1 | 1 |
| mindsdb/ | 163011c09299 | starlette | 1.3.1 | 1 |
| mintproject/ | 02260d20a21f | starlette | 1.3.1 | 1 |
| moreillon/ | bacb2ddd8394 | starlette | 1.3.1 | 1 |
| omkara25/ | 8327546c7aac | starlette | 1.3.1 | 1 |
| omkara25/ | afff40172b6b | starlette | 1.3.1 | 1 |
| omkara25/ | d62cba548580 | starlette | 1.3.1 | 1 |
| opea/ | 25dd26d9cd09 | starlette | 1.3.1 | 1 |
| opea/ | 38c51b791efa | starlette | 1.3.1 | 1 |
| opea/ | 58f91683892d | starlette | 1.3.1 | 1 |
| opea/ | e2436483b73d | starlette | 1.3.1 | 1 |
| opea/ | 3eaa91849512 | starlette | 1.3.1 | 1 |
| opea/ | 262c6048aab8 | starlette | 1.3.1 | 1 |
| opea/ | f68bec6a1271 | starlette | 1.3.1 | 1 |
| opea/ | 02f9e8fa5d71 | starlette | 1.3.1 | 1 |
| opea/ | 249afad3d268 | starlette | 1.3.1 | 1 |
| opea/ | 257ae94709e9 | starlette | 1.3.1 | 1 |
| opea/ | fe08165d7770 | starlette | 1.3.1 | 1 |
| opencsghq/ | 2f03fead54db | starlette | 1.3.1 | 1 |
| opencsghq/ | af7191a9cf8a | starlette | 1.3.1 | 1 |
| opencsghq/ | 2cd29671a03e | starlette | 1.3.1 | 1 |
| openmined/ | b72f74a68b32 | starlette | 1.3.1 | 1 |
| openmined/ | 3a4144c0bb82 | starlette | 1.3.1 | 1 |
| openvpn/ | 2253c10ec652 | starlette | 1.3.1 | 1 |
| phan2410/ | 9c6ed6de26ca | starlette | 1.3.1 | 1 |
| rommapp/ | 3512f2ca4557 | starlette | 1.3.1 | 1 |
| rommapp/ | b909e95d1aab | starlette | 1.3.1 | 1 |
| salehmir/ | 1afa95f979e9 | starlette | 1.3.1 | 1 |
| sharanalwar/ | 8d3cab80df49 | starlette | 1.3.1 | 1 |
| sirrend/ | 699e79e3d4e2 | starlette | 1.3.1 | 1 |
| stakewiselabs/ | 2afd0c0b34cb | starlette | 1.3.1 | 1 |
| substratusai/ | 61695be635eb | starlette | 1.3.1 | 1 |