PyPI/starlite CVE-2024-32982: high 8.2, EPSS 0.72%

Litestar and Starlite vulnerable to Path Traversal

Action: Upgrade starlite to 1.51.16 or later.

pip install starlite==1.51.16

Affected

Fixed versions

Sources

• osv: GHSA-83pv-qr33-2vcf#PyPI/starlite
• https://github.com/litestar-org/litestar/security/advisories/GHSA-83pv-qr33-2vcf
• https://nvd.nist.gov/vuln/detail/CVE-2024-32982
• https://github.com/litestar-org/litestar/commit/57e706e7effdc182fc9a2af5981bc88afb21851b
• https://github.com/litestar-org/litestar/commit/a07b79b84d8717bec5ac4d4674c1e4920ba9c813
• https://github.com/litestar-org/litestar
• https://github.com/litestar-org/litestar/blob/main/litestar/static_files/base.py#L70

CVE-2024-32982 · published 2024-05-06T14:20:50Z · modified 2026-09-10T03:50:13.516293931Z · JSON