Litestar-Org

9 CVEs across 1 Litestar-Org products. Browse Litestar-Org vulnerabilities, severities, and proof-of-concept exploits.

Litestar-Org products with known CVEs

ProductCVEs
Litestar9
Litestar-Org CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-48061Medium5.92026-08-03Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions prior to 2.22.0, an attacker can bypass the allowed hosts validation by omit…
CVE-2026-48060High8.12026-07-28Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which use a template engine in conjunction w…
CVE-2026-25480Medium6.52026-02-09Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, FileStore maps cache keys to filenames using Unicode NFKD normalization…
CVE-2026-25479Medium6.52026-02-09Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, in litestar.middleware.allowed_hosts, allowlist entries are compiled in…
CVE-2026-25478High7.42026-02-09Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.20.0, CORSConfig.allowed_origins_regex is constructed using a regex built fro…
CVE-2025-59152High7.52025-10-06Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In version 2.17.0, rate limits can be completely bypassed by manipulating the X-Forwarde…
CVE-2024-52581High7.52024-11-20Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.13.0, the multipart form parser shipped with litestar expects the ent…
CVE-2024-42370High8.32024-08-12Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions 2.10.0 and prior, Litestar's `docs-preview.yml` workflow is vulnerable to En…
CVE-2024-32982High8.22024-05-06Litestar and Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.8.3, 2.7.2, and 2.6.4, a Local File Inclusion (LFI) vulnerabilit…