PyPI/starlite CVE-2024-52581: high 7.5, EPSS 0.79%
Litestar allows unbounded resource consumption (DoS vulnerability)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.51.16 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gjcc-jvgw-wvwj#PyPI/starlite
- https://github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q
- https://nvd.nist.gov/vuln/detail/CVE-2024-52581
- https://github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138
- https://github.com/litestar-org/litestar
- https://github.com/litestar-org/litestar/blob/main/litestar/_multipart.py#L97
- https://github.com/pypa/advisory-database/tree/main/vulns/litestar/PYSEC-2024-178.yaml
CVE-2024-52581 · published · modified · JSON