LI
Vendor
litestar-org
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-48061 | LI litestar litestar-org | 5.9 | Aug 3 | Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header |
| CVE-2026-48060 | LI litestar litestar-org | 8.1 | Jul 28 | Litestar: HTML Injection Through CSRF Token |
| CVE-2026-25480 | LI litestar litestar-org | 6.5 | Feb 9 | FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) |
| CVE-2026-25479 | LI litestar litestar-org | 6.5 | Feb 9 | Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns |
| CVE-2026-25478 | LI litestar litestar-org | 6.5 | Feb 9 | Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins |
| CVE-2025-59152 | LI litestar litestar-org | 7.5 | Oct 6 | X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting |
| CVE-2024-52581 | LI litestar litestar-org | 7.5 | Nov 20 | Litestar allows unbounded resource consumption (DoS vulnerability) |
| CVE-2024-42370 | LI litestar litestar-org | 8.3 | Aug 9 | Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow |
| CVE-2024-32982 | LI litestar litestar-org | 8.2 | May 6 | Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |