python3Packages.litestar

litestar 2.21.1 · pkgs/development/python-modules/litestar/default.nix

Health

Risk

risk 43 high

+35 2 OSV advisories for 2.21.1
+8 an OSV advisory has a public exploit (CISA)

Version

2.21.1 no newer release known to repology

Channels

master 2.21.1 · nixos-unstable 2.21.1 · nixos-26.05 2.21.1 no channel is behind master

Hydra

no finished build of nixpkgs/unstable/python3Packages.litestar.x86_64-linux

Advisories

GHSA-3qmc-cj7q-62hv medium 5.9 public exploit EPSS 0.4% Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header (OSV, for this version)

CVE-2026-48061

GHSA-542p-wvx7-72m4 high 8.1 public exploit EPSS 0.4% Litestar has HTML Injection Through its CSRF Token (OSV, for this version)

CVE-2026-48060

Packaging

meta complete

Packagewhat each field means

Description

Production-ready, Light, Flexible and Extensible ASGI API framework

Homepage

https://litestar.dev/

Changelog

https://github.com/litestar-org/litestar/releases/tag/v2.21.1

License

MIT

Platforms

45 platforms: Linux, Darwin

Main program

litestar

Source provenance

not set: built from source

Outputs

out dist

Status

not broken, not insecure, free

Position

pkgs/development/python-modules/litestar/default.nix:164

Maintainers

Bot-wxt1221

Version bumps 1

all open bumps

python3Packages.litestar: 2.21.1 -> 2.23.0

#522435 by r-ryantm · opened 5mo ago

Pull requests 2

python3Packages.advanced-alchemy: init at 1.11.0 draft

#558849 by aaravrav · opened 6w ago · checks fail

python3Packages.litestar: 2.21.1 -> 2.23.0

#522435 by r-ryantm · opened 5mo ago

Issues 1

Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header 1.severity: security

#549106 by nixpkgs-security-tracker · opened 2mo ago · 0 comments