{"action":"Upgrade litestar to 2.18.0 or later.","affected":[{"fixed":"2.18.0","introduced":"2.17.0"}],"component":"litestar","cve_ids":["CVE-2025-59152"],"ecosystem":"PyPI","epss":0.00485,"exploited":false,"fixed_versions":["2.18.0"],"ghsa_id":"GHSA-hm36-ffrh-c77c","id":"tcs_01M5KFKZGP2QMA8EAN8BNAFXCY","modified_at":"2026-07-07T17:56:38.135851735Z","published_at":"2025-10-06T20:18:00Z","references":["https://osv.dev/vulnerability/GHSA-hm36-ffrh-c77c","https://github.com/litestar-org/litestar/security/advisories/GHSA-hm36-ffrh-c77c","https://nvd.nist.gov/vuln/detail/CVE-2025-59152","https://github.com/litestar-org/litestar/commit/42a89e043e50b515f8548a93954fe143f63cf9fb","https://github.com/litestar-org/litestar","https://github.com/litestar-org/litestar/blob/26f20ac6c52de2b4bf81161f7560c8bb4af6f382/litestar/middleware/rate_limit.py#L127"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hm36-ffrh-c77c","url":"https://osv.dev/vulnerability/GHSA-hm36-ffrh-c77c"}],"summary":"Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion"}