diff --git a/pkgs/development/python-modules/starlette/default.nix b/pkgs/development/python-modules/starlette/default.nix
index 20a9a0d81f78..3a4b671d9df6 100644
--- a/pkgs/development/python-modules/starlette/default.nix
+++ b/pkgs/development/python-modules/starlette/default.nix
@@ -2,6 +2,7 @@
 , stdenv
 , buildPythonPackage
 , fetchFromGitHub
+, fetchpatch
 , hatchling
 
 # runtime
@@ -34,6 +35,14 @@ buildPythonPackage rec {
     hash = "sha256-/zYqYmmCcOLU8Di9b4BzDLFtB5wYEEF1bYN6u2rb8Lg=";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "CVE-2023-29159.patch";
+      url = "https://github.com/encode/starlette/commit/1797de464124b090f10cf570441e8292936d63e3.patch";
+      hash = "sha256-IZFFc0hE4eBFMltpsNPMJ0u6mobrXtd87LXrUIGbBa0=";
+    })
+  ];
+
   nativeBuildInputs = [
     hatchling
   ];