PyPI/litestar CVE-2024-52581: high 7.5, EPSS 0.79%
Litestar allows unbounded resource consumption (DoS vulnerability)
Action: Upgrade litestar to 2.13.0 or later.
pip install litestar==2.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.13.0 | - |
Fixed versions
| 2.13.0 |
Sources
- osv: GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q
- https://nvd.nist.gov/vuln/detail/CVE-2024-52581
- https://github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138
- https://github.com/litestar-org/litestar
- https://github.com/litestar-org/litestar/blob/main/litestar/_multipart.py#L97
- https://github.com/pypa/advisory-database/tree/main/vulns/litestar/PYSEC-2024-178.yaml
CVE-2024-52581 · published · modified · JSON