[{"data":1,"prerenderedAt":644},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-starlette-beb9e527":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":324,"related":392},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:52:27.520Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:50:55.687Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":81,"category":82,"aiRelevant":45,"provider":82,"repositoryCount":40,"occurrenceCount":83,"directRepositoryCount":37,"versionCount":84,"licenseExpressions":85,"advisoryIds":87,"advisoryCount":84,"verifiedAttestation":96,"repositories":97,"versions":167},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","pypi","starlette",null,11,8,[86],"BSD-3-Clause",[88,89,90,91,92,93,94,95],"GHSA-2c2j-9gv5-cj73","GHSA-7f5h-v6xp-fcq8","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-f96h-pmfr-66vw","GHSA-jp82-jpqv-5vv3","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c",true,[98,106,113,119,126,133,140,146,153,160],{"id":99,"slug":100,"name":101,"pathWithNamespace":102,"versions":103,"evidenceCount":105},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[104],"1.3.1",2,{"id":107,"slug":108,"name":109,"pathWithNamespace":110,"versions":111,"evidenceCount":32},"opencode:7781","opencode-7781","kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",[112],"0.44.0",{"id":114,"slug":115,"name":116,"pathWithNamespace":117,"versions":118,"evidenceCount":32},"opencode:12239","opencode-12239","LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",[104],{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":124,"evidenceCount":32},"opencode:7674","opencode-7674","Coding Agent Usage Simulation","uba-ki-lab\u002Fcoding-agent-usage-simulation",[125],"0.49.0",{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":131,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[132],"0.46.2",{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":138,"evidenceCount":32},"opencode:10787","opencode-10787","LLM Questionnaire Benchmarking Framework","uba-ki-lab\u002Fllm-questionnaire-benchmarking-framework",[139],"0.47.3",{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":145,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[132],{"id":147,"slug":148,"name":149,"pathWithNamespace":150,"versions":151,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[152],"0.37.2",{"id":154,"slug":155,"name":156,"pathWithNamespace":157,"versions":158,"evidenceCount":32},"opencode:10775","opencode-10775","Ressource Efficient Computer Vision","uba-ki-lab\u002Fressource-efficient-computer-vision",[159],"0.50.0",{"id":161,"slug":162,"name":163,"pathWithNamespace":164,"versions":165,"evidenceCount":32},"opencode:7788","opencode-7788","Workshop Green LLM Usage","uba-ki-lab\u002Fworkshop-green-llm-usage",[166],"0.49.3",[168,199,214,228,242,267,286,304],{"version":152,"repositoryCount":32,"occurrenceCount":32,"ageDays":169,"advisoryIds":170,"metadata":171},890,[88,90,91,92,93,94,95],{"state":172,"checkedAt":173,"publishedAt":174,"deprecated":45,"deprecatedReason":82,"licenses":175,"advisoryIds":176,"links":184,"relatedProjects":193,"attestations":197,"verifiedAttestation":45,"projectStatus":198},"resolved","2026-08-13T02:29:21.454Z","2024-03-05T16:16:50Z",[86],[88,90,91,92,93,94,95,177,178,179,180,181,182,183],"PYSEC-2026-161","PYSEC-2026-1941","PYSEC-2026-1943","PYSEC-2026-2280","PYSEC-2026-2281","PYSEC-2026-248","PYSEC-2026-249",[185,188,190],{"label":186,"url":187},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"label":189,"url":187},"HOMEPAGE",{"label":191,"url":192},"DOCUMENTATION","https:\u002F\u002Fwww.starlette.io\u002F",[194],{"id":195,"relationType":186,"relationProvenance":196},"github.com\u002Fencode\u002Fstarlette","UNVERIFIED_METADATA",[],"active",{"version":112,"repositoryCount":32,"occurrenceCount":32,"ageDays":200,"advisoryIds":201,"metadata":202},592,[88,89,90,91,93,94,95],{"state":172,"checkedAt":173,"publishedAt":203,"deprecated":45,"deprecatedReason":82,"licenses":204,"advisoryIds":205,"links":207,"relatedProjects":211,"attestations":213,"verifiedAttestation":45,"projectStatus":198},"2024-12-28T07:32:53Z",[86],[88,89,90,91,93,94,95,177,178,206,180,181,182,183],"PYSEC-2026-1942",[208,209,210],{"label":191,"url":192},{"label":186,"url":187},{"label":189,"url":187},[212],{"id":195,"relationType":186,"relationProvenance":196},[],{"version":132,"repositoryCount":105,"occurrenceCount":105,"ageDays":215,"advisoryIds":216,"metadata":217},486,[88,89,90,91,93,94,95],{"state":172,"checkedAt":173,"publishedAt":218,"deprecated":45,"deprecatedReason":82,"licenses":219,"advisoryIds":220,"links":221,"relatedProjects":225,"attestations":227,"verifiedAttestation":45,"projectStatus":198},"2025-04-13T13:56:16Z",[86],[88,89,90,91,93,94,95,177,178,206,180,181,182,183],[222,223,224],{"label":189,"url":187},{"label":191,"url":192},{"label":186,"url":187},[226],{"id":195,"relationType":186,"relationProvenance":196},[],{"version":139,"repositoryCount":32,"occurrenceCount":32,"ageDays":229,"advisoryIds":230,"metadata":231},353,[89,90,91,93,94,95],{"state":172,"checkedAt":173,"publishedAt":232,"deprecated":45,"deprecatedReason":82,"licenses":233,"advisoryIds":234,"links":235,"relatedProjects":239,"attestations":241,"verifiedAttestation":45,"projectStatus":198},"2025-08-24T13:36:40Z",[86],[89,90,91,93,94,95,177,206,180,181,182,183],[236,237,238],{"label":189,"url":187},{"label":191,"url":192},{"label":186,"url":187},[240],{"id":195,"relationType":186,"relationProvenance":196},[],{"version":125,"repositoryCount":32,"occurrenceCount":32,"ageDays":243,"advisoryIds":244,"metadata":245},288,[89,90,91,93,94,95],{"state":172,"checkedAt":173,"publishedAt":246,"deprecated":45,"deprecatedReason":82,"licenses":247,"advisoryIds":248,"links":249,"relatedProjects":258,"attestations":263,"verifiedAttestation":96,"projectStatus":198},"2025-10-28T08:11:40Z",[86],[89,90,91,93,94,95,177,206,180,181,182,183],[250,252,254,255],{"label":189,"url":251},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"label":191,"url":253},"https:\u002F\u002Fstarlette.dev\u002F",{"label":186,"url":251},{"label":256,"url":257},"ATTESTATION","https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F0.49.0\u002Fstarlette-0.49.0-py3-none-any.whl\u002Fprovenance",[259,261],{"id":260,"relationType":186,"relationProvenance":196},"github.com\u002Fkludex\u002Fstarlette",{"id":260,"relationType":186,"relationProvenance":262},"PYPI_PUBLISH_ATTESTATION",[264],{"type":265,"url":257,"verified":96,"sourceRepository":251,"commit":266},"https:\u002F\u002Fdocs.pypi.org\u002Fattestations\u002Fpublish\u002Fv1","7d88ea6f8ec8aa99cdb5fc7a10b88db5aadfdfee",{"version":166,"repositoryCount":32,"occurrenceCount":32,"ageDays":268,"advisoryIds":269,"metadata":270},284,[90,91,93,94,95],{"state":172,"checkedAt":173,"publishedAt":271,"deprecated":45,"deprecatedReason":82,"licenses":272,"advisoryIds":273,"links":274,"relatedProjects":280,"attestations":283,"verifiedAttestation":96,"projectStatus":198},"2025-11-01T15:12:24Z",[86],[90,91,93,94,95,177,180,181,182,183],[275,276,277,278],{"label":189,"url":251},{"label":191,"url":253},{"label":186,"url":251},{"label":256,"url":279},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F0.49.3\u002Fstarlette-0.49.3-py3-none-any.whl\u002Fprovenance",[281,282],{"id":260,"relationType":186,"relationProvenance":196},{"id":260,"relationType":186,"relationProvenance":262},[284],{"type":265,"url":279,"verified":96,"sourceRepository":251,"commit":285},"de3ffecaeadd34612f71495374f5853edbda1bf2",{"version":159,"repositoryCount":32,"occurrenceCount":32,"ageDays":268,"advisoryIds":287,"metadata":288},[90,91,93,94,95],{"state":172,"checkedAt":173,"publishedAt":289,"deprecated":45,"deprecatedReason":82,"licenses":290,"advisoryIds":291,"links":292,"relatedProjects":298,"attestations":301,"verifiedAttestation":96,"projectStatus":198},"2025-11-01T15:25:25Z",[86],[90,91,93,94,95,177,180,181,182,183],[293,294,295,296],{"label":189,"url":251},{"label":191,"url":253},{"label":186,"url":251},{"label":256,"url":297},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F0.50.0\u002Fstarlette-0.50.0-py3-none-any.whl\u002Fprovenance",[299,300],{"id":260,"relationType":186,"relationProvenance":196},{"id":260,"relationType":186,"relationProvenance":262},[302],{"type":265,"url":297,"verified":96,"sourceRepository":251,"commit":303},"4941b4a04993d087dea66e9287fe9472babee879",{"version":104,"repositoryCount":105,"occurrenceCount":305,"ageDays":306,"advisoryIds":307,"metadata":308},3,61,[],{"state":172,"checkedAt":173,"publishedAt":309,"deprecated":45,"deprecatedReason":82,"licenses":310,"advisoryIds":311,"links":312,"relatedProjects":318,"attestations":321,"verifiedAttestation":96,"projectStatus":198},"2026-06-12T09:23:10Z",[86],[],[313,314,315,316],{"label":189,"url":251},{"label":191,"url":253},{"label":186,"url":251},{"label":256,"url":317},"https:\u002F\u002Fpypi.org\u002Fintegrity\u002Fstarlette\u002F1.3.1\u002Fstarlette-1.3.1-py3-none-any.whl\u002Fprovenance",[319,320],{"id":260,"relationType":186,"relationProvenance":196},{"id":260,"relationType":186,"relationProvenance":262},[322],{"type":265,"url":317,"verified":96,"sourceRepository":251,"commit":323},"8ebffd0678570ddd5d5bb11c6f3c3c7fd4682ab9",{"occurrences":325,"occurrenceCount":83},[326,333,339,346,352,358,363,369,374,380,386],{"id":327,"repositoryId":120,"repositorySlug":121,"repositoryName":122,"repositoryPathWithNamespace":123,"ecosystem":80,"name":81,"identity":79,"version":125,"versionKey":328,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":330,"sourceUrl":331,"commitSha":332},"component:e03936394a25b2d3752412a7","pypi:starlette@0.49.0","uv-lock","1b1464cf01496db34285bf91f7841aed50559816","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fcoding-agent-usage-simulation\u002F-\u002Fblob\u002Ffe8ab81af4926a34c6cf1f3a807ffeda2b398f32\u002Fuv.lock","fe8ab81af4926a34c6cf1f3a807ffeda2b398f32",{"id":334,"repositoryId":127,"repositorySlug":128,"repositoryName":129,"repositoryPathWithNamespace":130,"ecosystem":80,"name":81,"identity":79,"version":132,"versionKey":335,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":336,"sourceUrl":337,"commitSha":338},"component:1149dce6b6530e1664629bb6","pypi:starlette@0.46.2","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":340,"repositoryId":107,"repositorySlug":108,"repositoryName":109,"repositoryPathWithNamespace":110,"ecosystem":80,"name":81,"identity":79,"version":112,"versionKey":341,"direct":82,"development":45,"sourceKind":342,"filePath":55,"blobSha":343,"sourceUrl":344,"commitSha":345},"component:c4d10b3fd225b34d9c4ae6b1","pypi:starlette@0.44.0","poetry-lock","48f984e4d97ce607df0ee30b09a8e1e4c935e9db","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpoetry.lock","4a5cd798be9b97cc1bff7b30d930eafda774e380",{"id":347,"repositoryId":134,"repositorySlug":135,"repositoryName":136,"repositoryPathWithNamespace":137,"ecosystem":80,"name":81,"identity":79,"version":139,"versionKey":348,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":349,"sourceUrl":350,"commitSha":351},"component:e2ad8e168e2e8845644addfd","pypi:starlette@0.47.3","1b55661fee93d4733461df8e9c2b491b9205aac2","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-questionnaire-benchmarking-framework\u002F-\u002Fblob\u002F4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd\u002Fuv.lock","4e12ee9f3b0b6fdc77fe21cb89e6cfac17dc6ebd",{"id":353,"repositoryId":114,"repositorySlug":115,"repositoryName":116,"repositoryPathWithNamespace":117,"ecosystem":80,"name":81,"identity":79,"version":104,"versionKey":354,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":355,"sourceUrl":356,"commitSha":357},"component:da409046e690d3dd1fb314f3","pypi:starlette@1.3.1","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","318cda8c49da743f2c4a18a4f4d5c36fc22102fc",{"id":359,"repositoryId":141,"repositorySlug":142,"repositoryName":143,"repositoryPathWithNamespace":144,"ecosystem":80,"name":81,"identity":79,"version":132,"versionKey":335,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":360,"sourceUrl":361,"commitSha":362},"component:36c9d931132f37473f4b37e1","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":364,"repositoryId":99,"repositorySlug":100,"repositoryName":101,"repositoryPathWithNamespace":102,"ecosystem":80,"name":81,"identity":79,"version":104,"versionKey":354,"direct":82,"development":82,"sourceKind":329,"filePath":365,"blobSha":366,"sourceUrl":367,"commitSha":368},"component:de3d312b0899fd8a954a8bc6","mucgpt-assistant-service\u002Fuv.lock","36b26ae58598809148cf87cffcc3b67380e8b928","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-assistant-service\u002Fuv.lock","4d053562adec8962a8e523b7ed27b48a9f882d60",{"id":370,"repositoryId":99,"repositorySlug":100,"repositoryName":101,"repositoryPathWithNamespace":102,"ecosystem":80,"name":81,"identity":79,"version":104,"versionKey":354,"direct":82,"development":82,"sourceKind":329,"filePath":371,"blobSha":372,"sourceUrl":373,"commitSha":368},"component:81bfc56df8bbf0e1b171a761","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-core-service\u002Fuv.lock",{"id":375,"repositoryId":147,"repositorySlug":148,"repositoryName":149,"repositoryPathWithNamespace":150,"ecosystem":80,"name":81,"identity":79,"version":152,"versionKey":376,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":377,"sourceUrl":378,"commitSha":379},"component:95a68e34fc9fce901940bf30","pypi:starlette@0.37.2","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"id":381,"repositoryId":154,"repositorySlug":155,"repositoryName":156,"repositoryPathWithNamespace":157,"ecosystem":80,"name":81,"identity":79,"version":159,"versionKey":382,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":383,"sourceUrl":384,"commitSha":385},"component:08a17f42e7478de618b20f35","pypi:starlette@0.50.0","047f47304acd18a48770c101f5a8383cd19bb134","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fressource-efficient-computer-vision\u002F-\u002Fblob\u002F9aa07461b879a6161b7e901ea4c2a382b8f1b4ae\u002Fuv.lock","9aa07461b879a6161b7e901ea4c2a382b8f1b4ae",{"id":387,"repositoryId":161,"repositorySlug":162,"repositoryName":163,"repositoryPathWithNamespace":164,"ecosystem":80,"name":81,"identity":79,"version":166,"versionKey":388,"direct":82,"development":82,"sourceKind":329,"filePath":54,"blobSha":389,"sourceUrl":390,"commitSha":391},"component:4c4358d7d03d6d1cdbf1bb6c","pypi:starlette@0.49.3","bf2ad06a6324960d4a6a7a91340009e907848d0a","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fworkshop-green-llm-usage\u002F-\u002Fblob\u002Fd72ec94b58729e8b5e32caa9484867ec13add189\u002Fuv.lock","d72ec94b58729e8b5e32caa9484867ec13add189",{"repositories":393,"vulnerabilities":414},[394,396,398,400,402,404,406,408,410,412],{"id":99,"slug":100,"name":101,"pathWithNamespace":102,"versions":395,"evidenceCount":105},[104],{"id":107,"slug":108,"name":109,"pathWithNamespace":110,"versions":397,"evidenceCount":32},[112],{"id":114,"slug":115,"name":116,"pathWithNamespace":117,"versions":399,"evidenceCount":32},[104],{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":401,"evidenceCount":32},[125],{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":403,"evidenceCount":32},[132],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":405,"evidenceCount":32},[139],{"id":141,"slug":142,"name":143,"pathWithNamespace":144,"versions":407,"evidenceCount":32},[132],{"id":147,"slug":148,"name":149,"pathWithNamespace":150,"versions":409,"evidenceCount":32},[152],{"id":154,"slug":155,"name":156,"pathWithNamespace":157,"versions":411,"evidenceCount":32},[159],{"id":161,"slug":162,"name":163,"pathWithNamespace":164,"versions":413,"evidenceCount":32},[166],[415,448,477,492,543,569,591,626],{"id":88,"slug":416,"dossier":45,"summary":417,"aliases":418,"sourceIds":420,"published":421,"modified":422,"checkedAt":7,"severity":423,"references":427,"versionKeys":447,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[419,178],"CVE-2025-54121",[88,178],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[424],{"type":425,"score":426},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[428,431,434,437,439,441,443,445],{"type":429,"url":430},"WEB","https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":432,"url":433},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":435,"url":436},"FIX","https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":438,"url":187},"PACKAGE",{"type":429,"url":440},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":429,"url":442},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":438,"url":444},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":432,"url":446},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[376,341,335],{"id":89,"slug":449,"dossier":45,"summary":450,"aliases":451,"sourceIds":453,"published":454,"modified":455,"checkedAt":7,"severity":456,"references":459,"versionKeys":475,"packageCount":32,"repositoryCount":476},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[452,206],"CVE-2025-62727",[89,206],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[457],{"type":425,"score":458},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[460,462,464,466,469,470,472,473],{"type":429,"url":461},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":432,"url":463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":435,"url":465},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":467,"url":468},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":438,"url":251},{"type":429,"url":471},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":438,"url":444},{"type":432,"url":474},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[341,335,348,328],5,{"id":90,"slug":478,"dossier":45,"summary":479,"aliases":480,"sourceIds":482,"published":483,"modified":484,"checkedAt":7,"severity":485,"references":487,"versionKeys":491,"packageCount":32,"repositoryCount":84},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[481,183],"CVE-2026-54283",[90,183],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[486],{"type":425,"score":458},[488,490],{"type":432,"url":489},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":438,"url":251},[376,341,335,348,328,388,382],{"id":91,"slug":493,"dossier":45,"summary":494,"aliases":495,"sourceIds":498,"published":499,"modified":500,"checkedAt":7,"severity":501,"references":504,"versionKeys":542,"packageCount":32,"repositoryCount":84},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[496,177,497],"CVE-2026-48710","X41-2026-002",[91,177],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[502],{"type":425,"score":503},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[505,507,509,511,513,516,518,520,522,524,525,527,530,532,534,536,538,540],{"type":432,"url":506},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":432,"url":508},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":435,"url":510},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":429,"url":512},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":514,"url":515},"ARTICLE","https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":429,"url":517},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":429,"url":519},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":429,"url":521},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":429,"url":523},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":438,"url":251},{"type":429,"url":526},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":528,"url":529},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":429,"url":531},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":429,"url":533},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":429,"url":535},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":429,"url":537},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":514,"url":539},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":432,"url":541},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[376,341,335,348,328,388,382],{"id":92,"slug":544,"dossier":45,"summary":545,"aliases":546,"sourceIds":548,"published":549,"modified":550,"checkedAt":7,"severity":551,"references":557,"versionKeys":568,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[547,179],"CVE-2024-47874",[92,179],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[552,554],{"type":425,"score":553},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":555,"score":556},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[558,560,562,564,565,566],{"type":429,"url":559},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":432,"url":561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":435,"url":563},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":438,"url":187},{"type":438,"url":444},{"type":432,"url":567},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[376],{"id":93,"slug":570,"dossier":45,"summary":571,"aliases":572,"sourceIds":574,"published":575,"modified":576,"checkedAt":7,"severity":577,"references":582,"versionKeys":590,"packageCount":32,"repositoryCount":84},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[573,182],"CVE-2026-54282",[93,182],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[578,580],{"type":425,"score":579},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":425,"score":581},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[583,585,587,588],{"type":432,"url":584},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":432,"url":586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":438,"url":251},{"type":429,"url":589},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[376,341,335,348,328,388,382],{"id":94,"slug":592,"dossier":45,"summary":593,"aliases":594,"sourceIds":596,"published":597,"modified":598,"checkedAt":7,"severity":599,"references":602,"versionKeys":625,"packageCount":32,"repositoryCount":84},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[595,181],"CVE-2026-48818",[94,181],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[600],{"type":425,"score":601},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[603,605,606,608,610,612,614,616,618,621,623],{"type":432,"url":604},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":438,"url":251},{"type":429,"url":607},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":429,"url":609},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":432,"url":611},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":432,"url":613},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":432,"url":615},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":432,"url":617},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":619,"url":620},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":435,"url":622},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":435,"url":624},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[376,341,335,348,328,388,382],{"id":95,"slug":627,"dossier":45,"summary":628,"aliases":629,"sourceIds":631,"published":632,"modified":633,"checkedAt":7,"severity":634,"references":636,"versionKeys":643,"packageCount":32,"repositoryCount":84},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[630,180],"CVE-2026-48817",[95,180],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[635],{"type":425,"score":581},[637,639,641,642],{"type":432,"url":638},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":432,"url":640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":438,"url":251},{"type":432,"url":617},[376,341,335,348,328,388,382],1786593601840]