PyPI/litestar CVE-2024-32982: high 8.2, EPSS 0.72%
Litestar and Starlite vulnerable to Path Traversal
Action: Upgrade litestar to 2.6.4 or later.
pip install litestar==2.6.4pip install litestar==2.7.2pip install litestar==2.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.6.4 | - |
| 2.7.0 | 2.7.2 | - |
| 2.8.0 | 2.8.3 | - |
Fixed versions
| 2.6.4 | 2.7.2 | 2.8.3 |
Sources
- osv: PYSEC-2026-2605
- https://github.com/litestar-org/litestar/security/advisories/GHSA-83pv-qr33-2vcf
- https://nvd.nist.gov/vuln/detail/CVE-2024-32982
- https://github.com/litestar-org/litestar/commit/57e706e7effdc182fc9a2af5981bc88afb21851b
- https://github.com/litestar-org/litestar/commit/a07b79b84d8717bec5ac4d4674c1e4920ba9c813
- https://github.com/litestar-org/litestar
- https://github.com/litestar-org/litestar/blob/main/litestar/static_files/base.py#L70
- https://pypi.org/project/litestar
- https://github.com/advisories/GHSA-83pv-qr33-2vcf
CVE-2024-32982 · published · modified · JSON