{"action":"Upgrade litestar to 2.18.0 or later.","affected":[{"fixed":"2.18.0","introduced":"2.17.0"}],"component":"litestar","cve_ids":["CVE-2025-59152"],"ecosystem":"PyPI","epss":0.00485,"exploited":false,"fixed_versions":["2.18.0"],"ghsa_id":"GHSA-hm36-ffrh-c77c","id":"tcs_01M5KGT9JV4YY5QM60V3XSNWSS","modified_at":"2026-07-07T17:47:30.207767548Z","published_at":"2026-07-07T16:03:06.606865Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1553","https://github.com/litestar-org/litestar/security/advisories/GHSA-hm36-ffrh-c77c","https://nvd.nist.gov/vuln/detail/CVE-2025-59152","https://github.com/litestar-org/litestar/commit/42a89e043e50b515f8548a93954fe143f63cf9fb","https://github.com/litestar-org/litestar","https://github.com/litestar-org/litestar/blob/26f20ac6c52de2b4bf81161f7560c8bb4af6f382/litestar/middleware/rate_limit.py#L127","https://pypi.org/project/litestar","https://github.com/advisories/GHSA-hm36-ffrh-c77c"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1553","url":"https://osv.dev/vulnerability/PYSEC-2026-1553"}],"summary":"Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion"}