CVE-2024-52581
4 advisories.
PyPI/litestar CVE-2024-52581: high 7.5, EPSS 0.79%
Litestar allows unbounded resource consumption (DoS vulnerability)
Action: Upgrade litestar to 2.13.0 or later.
pip install litestar==2.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.13.0 | - |
Fixed versions
| 2.13.0 |
Sources
- osv: GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q
- https://nvd.nist.gov/vuln/detail/CVE-2024-52581
- https://github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138
- https://github.com/litestar-org/litestar
- https://github.com/litestar-org/litestar/blob/main/litestar/_multipart.py#L97
- https://github.com/pypa/advisory-database/tree/main/vulns/litestar/PYSEC-2024-178.yaml
CVE-2024-52581 · published · modified · JSON
PyPI/starlite CVE-2024-52581: high 7.5, EPSS 0.79%
Litestar allows unbounded resource consumption (DoS vulnerability)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.51.16 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gjcc-jvgw-wvwj#PyPI/starlite
- https://github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q
- https://nvd.nist.gov/vuln/detail/CVE-2024-52581
- https://github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138
- https://github.com/litestar-org/litestar
- https://github.com/litestar-org/litestar/blob/main/litestar/_multipart.py#L97
- https://github.com/pypa/advisory-database/tree/main/vulns/litestar/PYSEC-2024-178.yaml
CVE-2024-52581 · published · modified · JSON
PyPI/litestar CVE-2024-52581: high 7.5, EPSS 0.79%
Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.13.0, the multipart form parser shipped with litestar expects the entire request body as a single byte string
Action: Upgrade litestar to 2.13.0 or later.
pip install litestar==2.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.13.0 | - |
Fixed versions
| 2.13.0 |
Sources
- osv: PYSEC-2024-178
- https://github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q
- https://github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138
- https://github.com/litestar-org/litestar/blob/main/litestar/_multipart.py#L97
- https://github.com/advisories/GHSA-gjcc-jvgw-wvwj
CVE-2024-52581 · published · modified · JSON
PyPI/starlite CVE-2024-52581: high 7.5, EPSS 0.79%
Litestar allows unbounded resource consumption (DoS vulnerability)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.51.16 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1944
- https://github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj
- https://github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q
- https://nvd.nist.gov/vuln/detail/CVE-2024-52581
- https://github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138
- https://github.com/litestar-org/litestar
- https://github.com/litestar-org/litestar/blob/main/litestar/_multipart.py#L97
- https://github.com/pypa/advisory-database/tree/main/vulns/litestar/PYSEC-2024-178.yaml
- https://pypi.org/project/starlite
- https://github.com/advisories/GHSA-gjcc-jvgw-wvwj
CVE-2024-52581 · published · modified · JSON