Vulnerabilities

TI-2026-20591 CVE-2026-25480 · GHSA-vxqx-rh46-q2pg

FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

LOW 35

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0046 Published 2026-02-09 Fixed in 2.20.0 CWE-176

TI-2026-20590 CVE-2026-25479 · GHSA-93ph-p7v4-hwh4

LOW 35

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00353 Published 2026-02-09 Fixed in 2.20.0 CWE-185

TI-2026-20589 CVE-2026-25478 · GHSA-2p2x-hpg8-cqp2

LOW 33

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00439 Published 2026-02-09 Fixed in 2.20.0 CWE-942

TI-2024-35241 CVE-2024-52581 · GHSA-gjcc-jvgw-wvwj

HIGH 75

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00794 Published 2024-11-20 Fixed in 2.13.0 CWE-770