Vulnerabilities

TI-2026-35502 CVE-2026-48061 · GHSA-3qmc-cj7q-62hv

Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header

MEDIUM 60

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00375 Published 2026-08-03 Fixed in 2.22.0 CWE-644

TI-2026-35501 CVE-2026-48060 · GHSA-542p-wvx7-72m4

HIGH 70

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00352 Published 2026-07-28 Fixed in 2.20.0, 2.22.0 CWE-79

TI-2026-20591 CVE-2026-25480 · GHSA-vxqx-rh46-q2pg

LOW 35

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0046 Published 2026-02-09 Fixed in 2.20.0 CWE-176

TI-2026-20590 CVE-2026-25479 · GHSA-93ph-p7v4-hwh4

LOW 35

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00353 Published 2026-02-09 Fixed in 2.20.0 CWE-185

TI-2026-20589 CVE-2026-25478 · GHSA-2p2x-hpg8-cqp2

LOW 33

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00439 Published 2026-02-09 Fixed in 2.20.0 CWE-942

TI-2025-36757 CVE-2025-59152 · GHSA-hm36-ffrh-c77c

HIGH 72

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00485 Published 2025-10-06 Fixed in 2.18.0 CWE-807

TI-2024-35241 CVE-2024-52581 · GHSA-gjcc-jvgw-wvwj

HIGH 75

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00794 Published 2024-11-20 Fixed in 2.13.0 CWE-770

TI-2024-28356 CVE-2024-42370

HIGH 69

Litestar is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00651 Published 2024-08-09 No fix listed CWE-78

TI-2024-21848 CVE-2024-32982 · GHSA-83pv-qr33-2vcf

HIGH 77

Litestar and Starlite is an Asynchronous Server Gateway Interface (ASGI) framework.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00722 Published 2024-05-06 Fixed in 2.8.3, 2.7.2 +2 CWE-22