Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/09 5:19 p.m.7 views

GHSA-VXQX-RH46-Q2PG Litestar's FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Summary FileStore maps cache keys to filenames using Unicode NFKD normalization and ord substitution without separators, creating key collisions. When FileStore is used as response-cache backend, an unauthenticated remote attacker can trigger cache key collisions via crafted paths, causing one UR...

6.5CVSS5.7AI score0.00412EPSS
SaveExploits1References6
Rows per page
Query Builder