CVE-2025-59152 X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting

Litestar is an Asynchronous Server Gateway Interface ASGI framework. In version 2.17.0, rate limits can be completely bypassed by manipulating the X-Forwarded-For header. This renders IP-based rate limiting ineffective against determined attackers. Litestar's RateLimitMiddleware uses...

PT-2025-40902

Name of the Vulnerable Software and Affected Versions Litestar versions prior to 2.18.0 Description Litestar is an Asynchronous Server Gateway Interface ASGI framework. In version 2.17.0, rate limits can be bypassed by manipulating the X-Forwarded-For header. The RateLimitMiddleware uses cache ke...

EUVD-2024-49784

Malicious code in bioql PyPI...

EUVD-2025-29736

Malicious code in bioql PyPI...

EUVD-2025-24035

Malicious code in bioql PyPI...

EUVD-2023-33503

Malicious code in bioql PyPI...

EUVD-2023-28115

Malicious code in bioql PyPI...

EUVD-2023-1366

Malicious code in bioql PyPI...

EUVD-2023-49663

Malicious code in bioql PyPI...

EUVD-2022-35586

Malicious code in bioql PyPI...

EUVD-2025-27478

Malicious code in bioql PyPI...

EUVD-2022-5592

Malicious code in bioql PyPI...

EUVD-2022-36161

Malicious code in bioql PyPI...

EUVD-2022-37344

Malicious code in bioql PyPI...

EUVD-2024-3424

Malicious code in bioql PyPI...

EUVD-2025-0105

Malicious code in bioql PyPI...

CVE-2025-35432

CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes...

CVE-2025-35432 CISA Thorium does not rate limit account verification email messages

CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes...

CVE-2025-35432 CISA Thorium does not rate limit account verification email messages

CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes...

CVE-2025-35432 CISA Thorium does not rate limit account verification email messages

CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes...