mlisthenewcool opened a new issue, #61444:
URL: https://github.com/apache/airflow/issues/61444

   ### Apache Airflow version
   
   Other Airflow 3 version (please specify below)
   
   ### If "Other Airflow 3 version" selected, which one?
   
   3.1.7
   
   ### What happened?
   
   FastAPI 0.117.1 requires starlette 0.48.0 which is impacted by 
[CVE-2025-62727](https://nvd.nist.gov/vuln/detail/cve-2025-62727) (Score: 7.5).
   
   This has been fixed in starlette 0.49.1.
   
   ### What you think should happen instead?
   
   Upgrade FastAPI and starlette dependencies to latest or at least starlette 
>= 0.49.1
   
   ### How to reproduce
   
   Non relevant.
   
   ### Operating System
   
   Fedora 43
   
   ### Versions of Apache Airflow Providers
   
   _No response_
   
   ### Deployment
   
   Docker-Compose
   
   ### Deployment details
   
   _No response_
   
   ### Anything else?
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of 
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to