Advisory Database
  • Advisories
  • Dependency Scanning
  1. pypi
  2. ›
  3. litestar
  4. ›
  5. CVE-2024-52581

CVE-2024-52581: Litestar allows unbounded resource consumption (DoS vulnerability)

November 20, 2024 (updated January 21, 2025)

Litestar offers multiple methods to return a parsed representation of the request body, as well as extractors that rely on those parsers to map request content to structured data types. Multiple of those parsers do not have size limits when reading the request body into memory, which allows an attacker to cause excessive memory consumption on the server by sending large requests.

References

  • github.com/advisories/GHSA-gjcc-jvgw-wvwj
  • github.com/litestar-org/litestar
  • github.com/litestar-org/litestar/blob/main/litestar/_multipart.py
  • github.com/litestar-org/litestar/commit/53c1473b5ff7502816a9a339ffc90731bb0c2138
  • github.com/litestar-org/litestar/security/advisories/GHSA-gjcc-jvgw-wvwj
  • github.com/litestar-org/litestar/security/advisories/GHSA-p24m-863f-fm6q
  • github.com/pypa/advisory-database/tree/main/vulns/litestar/PYSEC-2024-178.yaml
  • nvd.nist.gov/vuln/detail/CVE-2024-52581

Code Behaviors & Features

Detect and mitigate CVE-2024-52581 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 2.13.0

Fixed versions

  • 2.13.0

Solution

Upgrade to version 2.13.0 or above.

Impact 7.5 HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Learn more about CVSS

Weakness

  • CWE-770: Allocation of Resources Without Limits or Throttling

Source file

pypi/litestar/CVE-2024-52581.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Wed, 14 May 2025 12:15:37 +0000.