Title: Security: Update Starlette dependency to address vulnerabilities · Issue #1557 · modelcontextprotocol/python-sdk · GitHub
Open Graph Title: Security: Update Starlette dependency to address vulnerabilities · Issue #1557 · modelcontextprotocol/python-sdk
X Title: Security: Update Starlette dependency to address vulnerabilities · Issue #1557 · modelcontextprotocol/python-sdk
Description: Issue The project currently uses Starlette >=0.27, which includes versions with known security vulnerabilities. The dependency should be updated to >=0.49.1 to address these issues. Impact Main project: pyproject.toml Example servers: ex...
Open Graph Description: Issue The project currently uses Starlette >=0.27, which includes versions with known security vulnerabilities. The dependency should be updated to >=0.49.1 to address these issues. Impact Main pro...
X Description: Issue The project currently uses Starlette >=0.27, which includes versions with known security vulnerabilities. The dependency should be updated to >=0.49.1 to address these issues. Impact Ma...
Opengraph URL: https://github.com/modelcontextprotocol/python-sdk/issues/1557
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Security: Update Starlette dependency to address vulnerabilities","articleBody":"## Issue\n\nThe project currently uses Starlette `\u003e=0.27`, which includes versions with known security vulnerabilities. The dependency should be updated to `\u003e=0.49.1` to address these issues.\n\n## Impact\n\n- Main project: `pyproject.toml`\n- Example servers:\n - `examples/servers/simple-streamablehttp/pyproject.toml`\n - `examples/servers/simple-streamablehttp-stateless/pyproject.toml`\n\n## Resolution\n\nA pull request has been created to update the Starlette dependency across all affected files:\n- PR: #1556\n\n## References\n\n- Updated version: Starlette 0.49.1\n- Minimum required version: `\u003e=0.49.1`","author":{"url":"https://github.com/ColeMurray","@type":"Person","name":"ColeMurray"},"datePublished":"2025-10-31T01:53:35.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/1557/python-sdk/issues/1557"}| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:c79bbe81-41f2-419e-563b-55b137206bec |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | 8F38:12366E:6E6736:967D03:6A61128C |
| html-safe-nonce | 92a45a7213876bbfa61f542f53524db032fd3d11afb502ed87b93d4b19494d6c |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RjM4OjEyMzY2RTo2RTY3MzY6OTY3RDAzOjZBNjExMjhDIiwidmlzaXRvcl9pZCI6IjE2ODcwMzM4NDY3OTY3MTg3MzIiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | fa4ed895f872ef5119752522abbd228cf3ef1bfc754f13bbefe8edc5ec367fe4 |
| hovercard-subject-tag | issue:3573093667 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/modelcontextprotocol/python-sdk/1557/issue_layout |
| twitter:image | https://opengraph.githubassets.com/3a47cb397c03e04b7bd63a1fa35c726c3845ea9f9c47cb105d4546808ba8abce/modelcontextprotocol/python-sdk/issues/1557 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/3a47cb397c03e04b7bd63a1fa35c726c3845ea9f9c47cb105d4546808ba8abce/modelcontextprotocol/python-sdk/issues/1557 |
| og:image:alt | Issue The project currently uses Starlette >=0.27, which includes versions with known security vulnerabilities. The dependency should be updated to >=0.49.1 to address these issues. Impact Main pro... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | ColeMurray |
| hostname | github.com |
| expected-hostname | github.com |
| None | f6dfd8e93b1f2b4f7bf96e6f6cd7edcd48360b75fee4f2ff9f611032fce38ec2 |
| turbo-cache-control | no-preview |
| go-import | github.com/modelcontextprotocol/python-sdk git https://github.com/modelcontextprotocol/python-sdk.git |
| octolytics-dimension-user_id | 182288589 |
| octolytics-dimension-user_login | modelcontextprotocol |
| octolytics-dimension-repository_id | 862584018 |
| octolytics-dimension-repository_nwo | modelcontextprotocol/python-sdk |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 862584018 |
| octolytics-dimension-repository_network_root_nwo | modelcontextprotocol/python-sdk |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 731b2ebd4784c28b421dc5f41abecd2dbac357f2 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width