Threats tagged 'brew-oterm-cve-2025-54121'

Starlette versions from 0.13.1 up to but not including 0.14.1_1 have a denial-of-service vulnerability when parsing multipart forms containing large files. The issue arises because the main event thread blocks while rolling over large uploaded files to disk, preventing new connections from being accepted. This vulnerability has a medium severity with a CVSS score of 5.3 and does not impact confidentiality or integrity, only availability. A fix is available in version 0.14.1_1.