CGA-xwfv-5pq7-9cgg

vulnerable version of Starlette python package used (v0.36.3, fixed is v0.40.0), but no vulnerable functions are used in kserve. The vulnerable DoS attack vector involves a very specific case of functions in the starlette.applications and starlette.routing subpackages, but those are never used in kserve. We cannot simply upgrade to the fixed version because kserve enforces starlette version >=0.37.2,<0.39.0. Waiting on upstream to migrate to fixed versions, but in the meantime, false-positive-determination."