Skip to content
OpenAdvisories

Package · PyPI

starlite

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.2
    CVE-2024-52581

    Litestar allows unbounded resource consumption (DoS vulnerability)

    Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.13.0, the multipart form parser shipped with litestar expects the entire request body as a single byte string and there is no default limit for the total size of the req…

    litestar-org litestar litestar starlite PyPI
  • High 8.2
    CVE-2024-32982

    Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    Litestar and Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to 2.8.3, 2.7.2, and 2.6.4, a Local File Inclusion (LFI) vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows at…

    litestar-org litestar litestar starlite PyPI
  • High 7.5
    CVE-2023-25578

    Starlite DoS vulnerability when parsing multipart request body

    Starlite is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 1.5.2, the request body parsing in `starlite` allows a potentially unauthenticated attacker to consume a large amount of CPU time and RAM. The multipart body parser proces…

    starlite-api starlite starlite PyPI