litestar vulnerabilities (PyPI)
9 vulnerabilities.
-
litestarPyPI Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header 5.9 Medium -
litestarPyPI Litestar: HTML Injection Through CSRF Token 8.1 High -
litestarPyPI FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) 6.5 Medium -
litestarPyPI Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns 6.5 Medium -
litestarPyPI Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins 7.4 High -
litestarPyPI X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting 7.5 High -
litestarPyPI Litestar has potential log injection in exception logging 3.7 Low -
litestarPyPI Litestar allows unbounded resource consumption (DoS vulnerability) 8.2 High -
litestarPyPI Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 8.2 High