Starlette

Latest version: v0.45.2

Safety actively analyzes 693883 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 12

0.30.0

Not secure
Removed

* Drop Python 3.7 support [2178](https://github.com/encode/starlette/pull/2178).

0.29.0

Not secure
Added

* Add `follow_redirects` parameter to `TestClient` [2207](https://github.com/encode/starlette/pull/2207).
* Add `__str__` to `HTTPException` and `WebSocketException` [2181](https://github.com/encode/starlette/pull/2181).
* Warn users when using `lifespan` together with `on_startup`/`on_shutdown` [2193](https://github.com/encode/starlette/pull/2193).
* Collect routes from `Host` to generate the OpenAPI schema [2183](https://github.com/encode/starlette/pull/2183).
* Add `request` argument to `TemplateResponse` [2191](https://github.com/encode/starlette/pull/2191).

Fixed

* Stop `body_stream` in case `more_body=False` on `BaseHTTPMiddleware` [2194](https://github.com/encode/starlette/pull/2194).

**Full Changelog**: https://github.com/encode/starlette/compare/0.28.0...0.29.0

0.28.0

Not secure
Changed
* Reuse `Request`'s body buffer for call_next in `BaseHTTPMiddleware` [1692](https://github.com/encode/starlette/pull/1692).
* Move exception handling logic to `Route` [2026](https://github.com/encode/starlette/pull/2026).

Added
* Add `env` parameter to `Jinja2Templates`, and deprecate `**env_options` [2159](https://github.com/encode/starlette/pull/2159).
* Add clear error message when `httpx` is not installed [2177](https://github.com/encode/starlette/pull/2177).

Fixed
* Allow "name" argument on `templates url_for()` [2127](https://github.com/encode/starlette/pull/2127).

**Full Changelog**: https://github.com/encode/starlette/compare/0.27.0...0.28.0

0.27.0

Not secure
This release fixes a path traversal vulnerability in `StaticFiles`. You can view the full security advisory:
https://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px

Added
* Minify JSON websocket data via `send_json` https://github.com/encode/starlette/pull/2128

Fixed
* Replace `commonprefix` by `commonpath` on `StaticFiles` [1797de4](https://github.com/encode/starlette/commit/1797de464124b090f10cf570441e8292936d63e3).
* Convert ImportErrors into ModuleNotFoundError [2135](https://github.com/encode/starlette/pull/2135).
* Correct the RuntimeError message content in websockets [2141](https://github.com/encode/starlette/pull/2141).

**Full Changelog**: https://github.com/encode/starlette/compare/0.26.1...0.27.0

0.26.1

Not secure
Fixed
* Fix typing of Lifespan to allow subclasses of Starlette [2077](https://github.com/encode/starlette/pull/2077).

0.26.0.post1

Not secure
Fixed
* Replace reference from Events to Lifespan on the mkdocs.yml [2072](https://github.com/encode/starlette/pull/2072).

Page 7 of 12

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.