litestar-org litestar

• CVE-2026-48061 Medium 5.9 Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header 0.4%
• CVE-2026-48060 High 8.1 Litestar: HTML Injection Through CSRF Token 0.4%
• CVE-2026-25480 Medium 6.5 FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) 0.5%
• CVE-2026-25479 Medium 6.5 Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns 0.4%
• CVE-2026-25478 High 7.4 Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins 0.4%
• CVE-2025-59152 High 7.5 X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting 0.5%
• CVE-2024-52581 High 8.2 Litestar allows unbounded resource consumption (DoS vulnerability) 0.8%
• CVE-2024-42370 High 8.3 Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow 0.7%
• CVE-2024-32982 High 8.2 Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 0.7%