litestar — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in litestar, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-25480	FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD) CWE-176	6.5	Medium	2026-02-09
CVE-2026-25479	Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns CWE-185	6.5	Medium	2026-02-09
CVE-2026-25478	Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins CWE-942	7.4	High	2026-02-09
CVE-2025-59152	X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting CWE-807	7.5	High	2025-10-06
CVE-2024-52581	Litestar allows unbounded resource consumption (DoS vulnerability) CWE-770	5.9^AI	Medium^AI	2024-11-20
CVE-2024-42370	Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow CWE-78	8.3	High	2024-08-09
CVE-2024-32982	Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22	8.2	High	2024-05-06

All 7 known CVE vulnerabilities affecting litestar with full Chinese analysis, references, and POCs where available.