A vulnerability in Starlette versions 1.137.0 through 1.165.9 allows an attacker to manipulate the reconstructed request URL's hostname by supplying a request path that does not start with a slash. This causes the path to be interpreted as part of the URL authority, misleading code that relies on request.url.hostname for security decisions. The issue primarily affects middleware or handlers that inspect request.url before routing, with limited exploitability due to routing returning 404 for such paths.
Starlette's HTTPEndpoint dispatches HTTP methods by lowercasing the method name and using getattr to call an attribute, without restricting to known HTTP verbs. If a route is registered without an explicit methods= argument, any HTTP method is accepted, allowing non-standard methods to invoke internal endpoint methods unintentionally. This can lead to unauthorized invocation of internal helper methods. The issue affects Starlette versions from 1.137.0 up to but not including 1.165.0 and frameworks built on it like FastAPI. A fix is available in version 1.165.0.
Starlette versions from 1.137.0 up to but not including 1.165.0 improperly validate the HTTP Host header when reconstructing request.url, allowing a malformed Host header to cause request.url.path to differ from the actual requested path. This discrepancy can lead to bypass of path-based security checks if middleware or endpoints rely on request.url.path rather than the canonical ASGI path. The vulnerability does not directly grant access or modify routing but can enable bypass only if applications depend on the flawed request.url.path for authorization. The issue is mitigated by validating the Host header per RFC 9112 and falling back to server scope for malformed values. A fix is available in version 1.165.0.
Starlette's FileResponse component contains a vulnerability in its HTTP Range header parsing logic that results in quadratic time complexity. An unauthenticated attacker can craft a Range header with many small or specially shaped ranges to cause excessive CPU usage, leading to denial-of-service (DoS) conditions on endpoints serving files. This affects Starlette applications using FileResponse or StaticFiles, as well as frameworks built on Starlette such as FastAPI when serving files. The vulnerability is identified as CVE-2025-62727 and has a high severity score of 7.5. A fix is available in Starlette version 1.141.0_1.
CVE-2024-5569 is a Denial of Service (DoS) vulnerability in the jaraco/zipp library affecting all versions prior to 3.19.1. The flaw causes an infinite loop when processing specially crafted zip files via certain Path-related functions. This vulnerability also impacts the zipfile module in CPython due to shared code. The infinite loop prevents application responsiveness but does not exhaust resources. The issue is fixed in jaraco/zipp version 3.19.1.
A Unicode normalization mismatch in setuptools' handling of MANIFEST.in exclusions can cause files intended to be excluded from source distributions to be included instead. This occurs on macOS APFS/HFS+ filesystems where filenames are stored in NFD form but MANIFEST.in patterns are typically in NFC form, leading to silent exclusion bypass. The issue affects non-ASCII filenames and can result in unintended disclosure of secret or private files when publishing to PyPI. ASCII-only exclusions are unaffected. A fix is available in setuptools 2.13.0.
A Time-of-Check-Time-of-Use (TOCTOU) race condition vulnerability exists in the SoftFileLock implementation of the filelock package used by PyTorch. The flaw allows an attacker with local filesystem access and permission to create symlinks to exploit a race window between permission checking and file creation, potentially causing lock operations to fail or operate on unintended files. This can lead to silent lock acquisition failures, denial of service, and resource serialization issues. The vulnerability has been patched by adding the O_NOFOLLOW flag to prevent symlink following during lock file creation. Users should upgrade to the patched versions or apply recommended mitigations if immediate upgrade is not possible.
A TOCTOU race condition in the filelock library used by PyTorch and other tools allows local attackers to exploit a time gap during lock file creation to create symlinks that cause arbitrary user files to be truncated. This affects Unix, Linux, macOS, and Windows systems. The vulnerability can corrupt critical files such as configuration files, CPU ISA caches, or model checkpoints, potentially causing application crashes or data loss. The issue is fixed in filelock version 3.20.1 by preventing symlink following during file open operations.
A path traversal vulnerability in setuptools' PackageIndex.download function allows an attacker to write files to arbitrary filesystem locations with the permissions of the running Python process. This flaw arises from insufficient sanitization of URL-derived filenames, enabling path traversal despite some replacement of '..' sequences. The vulnerability affects PyTorch versions from 2.2.0 up to but not including 2.8.0 and was fixed in version 2.8.0. Exploitation could lead to arbitrary file write and potentially remote code execution depending on the environment.
CVE-2024-6345 is a high-severity vulnerability in the setuptools package_index module used by PyTorch versions 2.2.0 up to but not including 2.4.1. It allows remote code execution via command injection through download functions that handle package URLs. This flaw is fixed in setuptools version 70.0 and PyTorch 2.4.1.
CVE-2024-3772 is a regular expression denial of service (ReDoS) vulnerability in Pydantic versions prior to 2.13.4. It allows remote attackers to cause a denial of service by submitting a specially crafted email string that triggers excessive processing in the regular expression engine.
The httplib2 HTTP client library has a vulnerability in its handling of gzip and deflate compressed HTTP response bodies. It performs unbounded decompression without limits on the decompressed size, allowing a malicious server to send a small compressed payload that expands to a very large size in memory. This can cause the client process to run out of memory or crash due to MemoryError. The vulnerability affects any application using httplib2.Http().request() with untrusted HTTP endpoints. A fix is available in version 5.31.1_1.
CVE-2026-59886 is a denial-of-service vulnerability in the pyasn1 library's handling of ASN.1 REAL values. The issue arises when converting decoded REAL values with very large exponents to Python floats, causing excessive CPU and memory consumption. This can hang processes that print, log, or compare such values decoded from untrusted ASN.1 data. The vulnerability affects pyasn1.type.univ.Real conversions triggered by BER, CER, and DER decoders. It was fixed in pyasn1 version 5.31.1_1.
A vulnerability in pyasn1's BER/CER/DER decoders and encoders causes quadratic time complexity when processing OBJECT IDENTIFIER and RELATIVE-OID values with many arcs. This can lead to denial of service by consuming excessive CPU resources when decoding or encoding crafted ASN.1 data. The issue affects pyasn1 versions from 3.4.0 up to but not including 5.31.1_1 and is fixed in version 5.31.1_1.
CVE-2026-59884 is a denial of service vulnerability in the pyasn1 library's BER/CER/DER decoders. The flaw allows crafted inputs with unbounded long-form tag IDs to cause excessive CPU consumption due to quadratic growth in processing time. On Python 3.11 and later, it can also trigger unhandled ValueErrors during error message formatting, potentially bypassing error handling. The issue affects decoding of untrusted BER/CER/DER inputs in pyasn1 versions from 3.4.0 up to but not including 5.31.1_1. The vulnerability is fixed in version 5.31.1_1 by limiting tag ID size and improving error handling.
The pyasn1 library contains a denial of service vulnerability due to unbounded recursion when decoding ASN.1 data with deeply nested indefinite-length SEQUENCE or SET structures. An attacker can supply a crafted payload causing the decoder to recurse until the Python interpreter crashes with a RecursionError or exhausts memory, crashing the host application. This affects services parsing untrusted ASN.1 data such as LDAP, SNMP, Kerberos, or X.509 parsers. The vulnerability is fixed in pyasn1 version 5.20.0_1.
A Denial-of-Service (DoS) vulnerability exists in pyasn1 version 0.6.1 due to improper handling of malformed RELATIVE-OID values with excessive continuation octets in the decoder. This flaw can cause memory exhaustion and potentially hang systems or stop services that decode ASN.1 data, such as LDAP servers, TLS/SSL endpoints, and OCSP responders. The issue is fixed in pyasn1 version 5.16.1_4.
A TOCTOU (Time-of-Check-Time-of-Use) vulnerability exists in virtualenv up to version 20.36.1, allowing local attackers to exploit race conditions in directory creation. This can lead to symlink attacks on app_data and lock file operations, enabling cache poisoning, information disclosure, lock bypass, or denial of service on multi-user systems. The issue is fixed in version 20.36.2 by using atomic directory creation calls.
CVE-2024-53899 is a command injection vulnerability in virtualenv versions before 20.26.6, affecting the pdm product. The flaw arises because magic template strings in the activation scripts for virtual environments are not properly quoted, allowing an attacker to inject commands. This vulnerability is distinct from CVE-2024-9287. It affects pdm versions >=2.0.0 <2.9.3_2 and >=2.12.3 <2.19.2. A fix is available in versions 2.9.3_2 and 2.19.2.
JupyterLab versions from 4.1.0 up to but not including 4.6.2 have a vulnerability in the plugin manager that allows authenticated users to bypass administrator-enforced plugin lock rules via direct API requests. This bypass affects child plugins of multi-plugin extensions and scenarios where administrators issued a 'lock all' command. The vulnerability can impact data integrity and circumvent restrictions implemented through locked plugins. Fixed in JupyterLab 4.6.2 and 4.5.10.