Security
فارسی
All products

litestar

PyPI · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Litestar and Starlite vulnerable to Path TraversalCVE-2024-32982 · GHSA-83PV-QR33-2VCFVersion ranges need review. litestarstarlite PyPI High Fix reported
Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host headerCVE-2026-48061 · GHSA-3QMC-CJ7Q-62HVVersion ranges need review. litestar PyPI Medium Fix reported
Litestar has HTML Injection Through its CSRF TokenCVE-2026-48060 · GHSA-542P-WVX7-72M4Version ranges need review. litestar PyPI High Fix reported
Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)CVE-2026-25480 · GHSA-VXQX-RH46-Q2PGVersion ranges need review. litestar PyPI Medium Fix reported
Litestar's CORS origin allowlist has a bypass due to unescaped regex metacharacters in allowed originsCVE-2026-25478 · GHSA-2P2X-HPG8-CQP2Version ranges need review. litestar PyPI High Fix reported
Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patternsCVE-2026-25479 · GHSA-93PH-P7V4-HWH4Version ranges need review. litestar PyPI Medium Fix reported
Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit EvasionCVE-2025-59152 · GHSA-HM36-FFRH-C77CVersion ranges need review. litestar PyPI High Fix reported
Litestar allows unbounded resource consumption (DoS vulnerability) CVE-2024-52581 · GHSA-GJCC-JVGW-WVWJVersion ranges need review. litestarstarlite PyPI High Fix reported
Litestar has potential log injection in exception loggingGHSA-674P-XV2X-RF3G litestar PyPI Low Fix reported