CVE-2023-29159

Advisory

Fastapi 0.95.2 updates its dependency 'Starlette' to versions '>=0.27.0' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* ⬆️ Upgrade Starlette version to `>=0.27.0` for a security release. PR [9541](https://github.com/tiangolo/fastapi/pull/9541) by [tiangolo](https://github.com/tiangolo). Details on [Starlette's security advisory](https://github.com/encode/starlette/security/advisories/GHSA-v5gw-mw7f-84px).

Translations

* 🌐 Add Portuguese translation for `docs/pt/docs/advanced/events.md`. PR [9326](https://github.com/tiangolo/fastapi/pull/9326) by [oandersonmagalhaes](https://github.com/oandersonmagalhaes).
* 🌐 Add Russian translation for `docs/ru/docs/deployment/manually.md`. PR [9417](https://github.com/tiangolo/fastapi/pull/9417) by [Xewus](https://github.com/Xewus).
* 🌐 Add setup for translations to Lao. PR [9396](https://github.com/tiangolo/fastapi/pull/9396) by [TheBrown](https://github.com/TheBrown).
* 🌐 Add Russian translation for `docs/ru/docs/tutorial/testing.md`. PR [9403](https://github.com/tiangolo/fastapi/pull/9403) by [Xewus](https://github.com/Xewus).
* 🌐 Add Russian translation for `docs/ru/docs/deployment/https.md`. PR [9428](https://github.com/tiangolo/fastapi/pull/9428) by [Xewus](https://github.com/Xewus).
* ✏ Fix command to install requirements in Windows. PR [9445](https://github.com/tiangolo/fastapi/pull/9445) by [MariiaRomanuik](https://github.com/MariiaRomanuik).
* 🌐 Add French translation for `docs/fr/docs/advanced/response-directly.md`. PR [9415](https://github.com/tiangolo/fastapi/pull/9415) by [axel584](https://github.com/axel584).
* 🌐 Initiate Czech translation setup. PR [9288](https://github.com/tiangolo/fastapi/pull/9288) by [3p1463k](https://github.com/3p1463k).
* ✏ Fix typo in Portuguese docs for `docs/pt/docs/index.md`. PR [9337](https://github.com/tiangolo/fastapi/pull/9337) by [lucasbalieiro](https://github.com/lucasbalieiro).
* 🌐 Add Russian translation for `docs/ru/docs/tutorial/response-status-code.md`. PR [9370](https://github.com/tiangolo/fastapi/pull/9370) by [nadia3373](https://github.com/nadia3373).

Internal

* 🐛 Fix `flask.escape` warning for internal tests. PR [9468](https://github.com/tiangolo/fastapi/pull/9468) by [samuelcolvin](https://github.com/samuelcolvin).
* ✅ Refactor 2 tests, for consistency and simplification. PR [9504](https://github.com/tiangolo/fastapi/pull/9504) by [tiangolo](https://github.com/tiangolo).
* ✅ Refactor OpenAPI tests, prepare for Pydantic v2. PR [9503](https://github.com/tiangolo/fastapi/pull/9503) by [tiangolo](https://github.com/tiangolo).
* ⬆ Bump dawidd6/action-download-artifact from 2.26.0 to 2.27.0. PR [9394](https://github.com/tiangolo/fastapi/pull/9394) by [dependabot[bot]](https://github.com/apps/dependabot).
* 💚 Disable setup-python pip cache in CI. PR [9438](https://github.com/tiangolo/fastapi/pull/9438) by [tiangolo](https://github.com/tiangolo).
* ⬆ Bump pypa/gh-action-pypi-publish from 1.6.4 to 1.8.5. PR [9346](https://github.com/tiangolo/fastapi/pull/9346) by [dependabot[bot]](https://github.com/apps/dependabot).

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30798
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29159