LI
Product
litestar
9
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add litestar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25480 | 6.5 | Feb 9 | FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) Affected: < 2.20.0 |
| CVE-2026-25479 | 6.5 | Feb 9 | Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns Affected: < 2.20.0 |
| CVE-2026-25478 | 6.5 | Feb 9 | Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins Affected: < 2.20.0 |
| CVE-2026-48061 | 5.9 | Aug 3 | Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header Affected: < 2.22.0 |
Showing 4