Litestar-org vulnerabilities
We track 5 vulnerabilities in Litestar-org products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 28, 2026.
Latest Litestar-org vulnerabilities
- 8.1 High severity
litestar: Improper Neutralization of Input During Web Page Generation
Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which use a template engine in conjunction with CSRF protection are vulnerable to HTML Injection which can be escalated to Cross Site Scripting d
- 7.5 High severity
litestar: Reliance on Untrusted Inputs in a Security Decision
Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In version 2.17.0, rate limits can be completely bypassed by manipulating the X-Forwarded-For header. This renders IP-based rate limiting ineffective against determined attackers. Litestar'
- 7.5 High severity
litestar: Allocation of Resources Without Limits or Throttling
Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.13.0, the multipart form parser shipped with litestar expects the entire request body as a single byte string and there is no default limit for the total size of the requ
- 8.3 High severity
litestar: Improper Neutralization of Special Elements used in an OS Command
Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions 2.10.0 and prior, Litestar's `docs-preview.yml` workflow is vulnerable to Environment Variable injection which may lead to secret exfiltration and repository manipulation. This
- 8.2 High severity
litestar: Improper Limitation of a Pathname to a Restricted Directory
Litestar and Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.8.3, 2.7.2, and 2.6.4, a Local File Inclusion (LFI) vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows att