Threats tagged 'brew-semgrep-cve-2025-62727'

Starlette's FileResponse component contains a vulnerability in its HTTP Range header parsing logic that results in quadratic time complexity. An unauthenticated attacker can craft a Range header with many small or specially shaped ranges to cause excessive CPU usage, leading to denial-of-service (DoS) conditions on endpoints serving files. This affects Starlette applications using FileResponse or StaticFiles, as well as frameworks built on Starlette such as FastAPI when serving files. The vulnerability is identified as CVE-2025-62727 and has a high severity score of 7.5. A fix is available in Starlette version 1.141.0_1.