EUVD-2014-6116

Malware in sbrugna...

EUVD-2012-3481

Malware in sbrugna...

EUVD-2021-12710

Malware in sbrugna...

EUVD-2008-0400

Malware in sbrugna...

EUVD-2017-0159

Malware in sbrugna...

EUVD-2008-4624

Malware in sbrugna...

EUVD-2013-3019

Malware in sbrugna...

EUVD-2005-4681

Malware in sbrugna...

EUVD-2021-1463

Malware in sbrugna...

EUVD-2018-9166

Malware in sbrugna...

EUVD-2021-15986

Malware in sbrugna...

EUVD-2018-0298

Malware in sbrugna...

EUVD-2020-11355

Malware in sbrugna...

EUVD-2012-2552

Malware in sbrugna...

EUVD-2020-10890

Malware in sbrugna...

EUVD-2017-0256

Malware in sbrugna...

EUVD-2021-1332

Malware in sbrugna...

EUVD-2020-29814

Malware in sbrugna...

EUVD-2025-32539

Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion...

GHSA-HM36-FFRH-C77C Litestar X-Forwarded-For Header Spoofing Vulnerability Enables Rate Limit Evasion

While testing Litestar's RateLimitMiddleware, I discovered that rate limits can be completely bypassed by manipulating the X-Forwarded-For header. This renders IP-based rate limiting ineffective against determined attackers. The Problem Litestar's RateLimitMiddleware uses cachekeyfromrequest to...