VYPR

starlette

by Starlette

CVEs (1)

  • CVE-2025-0182HigMar 20, 2025
    risk 0.49cvss 7.5epss 0.01

    A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory exhaustion. The issue arises from the use of a vulnerable version of the starlette package (<=0.49) via fastapi, which was patched in fastapi version 0.115.3. The vulnerability can be…