Litestar-org vulnerabilities

Products

• Litestar 9

Newest

• litestar-org litestar Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header CVE-2026-48061 Fix available 5.9 MediumJune 10, 2026
• litestar-org litestar Litestar: HTML Injection Through CSRF Token CVE-2026-48060 Public exploitFix available 8.1 HighJune 10, 2026
• litestar FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) CVE-2026-25480 Fix available 6.5 MediumFebruary 9, 2026
• litestar Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns CVE-2026-25479 Fix available 6.5 MediumFebruary 9, 2026
• litestar Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins CVE-2026-25478 Fix available 7.4 HighFebruary 9, 2026
• litestar-org litestar X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting CVE-2025-59152 Fix available 7.5 HighOctober 6, 2025
• litestar Litestar allows unbounded resource consumption (DoS vulnerability) CVE-2024-52581 Fix available 8.2 HighNovember 20, 2024
• litestar-org litestar Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow CVE-2024-42370 Public exploit 8.3 HighAugust 9, 2024
• litestar-org litestar, starliteproject starlite +1 more Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-32982 Fix available 8.2 HighMay 6, 2024