starlette (1.3.1-1) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/python-team/packages/starlette.git
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/master
Path: debian/changelog
Repo size: 1888256
Browser: https://salsa.debian.org/python-team/packages/starlette
Last scan: 2026-08-01 15:13:01+00
Error: https://salsa.debian.org/api/v4/projects/python-team%2Fpackages%2Fstarlette API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
Next scan: 2026-08-08 12:48:00+00

Debian changelog in Git:

starlette (1.3.1-1) unstable; urgency=medium

  * New upstream version 1.3.1
    Fixed CVE issues in upstream version 1.3.0: (Closes: #1140632)
    CVE-2026-54282: Unvalidated request path concatenated into authority
                    poisons request.url.hostname
    Fixed CVE issues in upstream version 1.3.1: (Closes: #1140631)
    CVE-2026-54283: request.form() limits silently ignored for
                    application/x-www-form-urlencoded enable DoS
  * d/control:
    - Bump Standards-Version to 4.7.4 (no changes)
    - Update Build-Depends and Recommends to reflect upstream

 -- Matheus Polkorny <mpolkorny@gmail.com>  Thu, 09 Jul 2026 21:45:58 -0300

This branch is even with tag debian/1.3.1-1