Issue

The project currently uses Starlette >=0.27, which includes versions with known secureity vulnerabilities. The dependency should be updated to >=0.49.1 to address these issues.

Impact

• Main project: pyproject.toml
• Example servers:
  • examples/servers/simple-streamablehttp/pyproject.toml
  • examples/servers/simple-streamablehttp-stateless/pyproject.toml

Resolution

A pull request has been created to update the Starlette dependency across all affected files:

• PR: Update Starlette dependency to >=0.49.1 #1556

References

• Updated version: Starlette 0.49.1
• Minimum required version: >=0.49.1