Back Linuxsecurity openSUSE Python-Starlette Important Denial of Service Issues 2026-21053
- CVE-2026-48817: arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` (bsc#1268389).
- CVE-2026-54282: request path that lacks a leading forward slash can lead to request.url.hostname manipulation
- CVE-2026-54283: urlencoded request body with an oversized data can lead to a denial of service (bsc#1268517).
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch openSUSE-Leap-16.0-1066=1
- openSUSE Leap 16.0:
python313-starlette-0.41.3-160000.4.1
*
*
*
Get the latest Linux and open source security news straight to your inbox.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
