Skip to content
OpenAdvisories

Vendor

litestar-org

9 known vulnerabilities.

Products

litestar 9
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-48060 Public exploit

    Litestar: HTML Injection Through CSRF Token

    Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar instances which use a template engine in conjunction with CSRF protection are vulnerable to HTML Injection which can be escalated to Cross Site Scripting …

    litestar-org litestar litestar PyPI
  • High 8.3
    CVE-2024-42370 Public exploit

    Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow

    Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In versions 2.10.0 and prior, Litestar's `docs-preview.yml` workflow is vulnerable to Environment Variable injection which may lead to secret exfiltration and repository manipulation. This…

    litestar-org litestar