Skip to content
OpenAdvisories

Package · PyPI

litestar

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-48060 Public exploit

    Litestar: HTML Injection Through CSRF Token

    Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which use a template engine in conjunction with CSRF protection are vulnerable to HTML Injection which can be escalated to Cross Site Scripting …

    litestar-org litestar litestar PyPI