Find a vulnerability

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "starlette security update",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Salvatore Bonaccorso"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6478-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nAugust 30, 2026                       https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage        : starlette\nCVE ID         : CVE-2026-48817 CVE-2026-54282 CVE-2026-54283\nDebian Bug     : 1140631 1140632\nSeveral vulnerabilities were discovered in starlette, a lightweight ASGI\nframework/toolkit, which could result in bypass of authorization checks\nor denial of service.\nFor the stable distribution (trixie), these problems have been fixed in\nversion 0.46.1-3+deb13u3.\nWe recommend that you upgrade your starlette packages.\nFor the detailed security status of starlette please refer to its\nsecurity tracker page at:\nhttps://security-tracker.debian.org/tracker/starlette\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----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\netb6ahBWUG4IW6SXpIXFMNE79bpKRdBfl97rSyRENypCUi0pyA8=\n=lp7x\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T09:47:21Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/682f6b1809b9970368b4464f49972e22e235be64328111093eda05351711f4fd"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/6WKTDI42GI7GC2PUJ4GV3ABRFKGWIZY2/"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/starlette"
        },
        {
          "url": "https://www.debian.org/security/"
        },
        {
          "url": "https://www.debian.org/security/faq"
        }
      ],
      "source": {
        "defect": [
          "E1x0ktc-0000000Bekc-0Iyv%40seger.debian.org"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [SECURITY] [DSA 6478-1] starlette security update",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-48817",
              "type": "related"
            },
            {
              "destId": "CVE-2026-54282",
              "type": "related"
            },
            {
              "destId": "CVE-2026-54283",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0526",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/682f6b1809b9970368b4464f49972e22e235be64328111093eda05351711f4fd",
            "automated": true,
            "contentSha256": "682f6b1809b9970368b4464f49972e22e235be64328111093eda05351711f4fd",
            "evidenceScore": 6,
            "messageId": "E1x0ktc-0000000Bekc-0Iyv%40seger.debian.org",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/6WKTDI42GI7GC2PUJ4GV3ABRFKGWIZY2/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-02T09:47:21Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0526"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T09:47:21Z",
    "dateUpdated": "2026-11-02T09:47:21Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0526"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}