litestar-org vulnerabilities
9 published CVEs name litestar-org among the affected products.
- 9Published CVEs9 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-48061
Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header
litestar-org · litestar
Medium5.9 - CVE-2026-48060
Litestar: HTML Injection Through CSRF Token
litestar-org · litestar
High8.1 - CVE-2026-25480
FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)
litestar-org · litestar
Medium6.5 - CVE-2026-25479
Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns
litestar-org · litestar
Medium6.5 - CVE-2026-25478
Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins
litestar-org · litestar
High7.4 - CVE-2025-59152
X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting
litestar-org · litestar
High7.5 - CVE-2024-52581
Litestar allows unbounded resource consumption (DoS vulnerability)
litestar-org · litestar
High8.2 - CVE-2024-42370
Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow
litestar-org · litestar
High8.3 - CVE-2024-32982
Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
litestar-org · litestar
High8.2