CVE-2026-48061 | litestar-org Litestar up to 2.21.x AllowedHostsMiddleware server-side request forgery

A vulnerability identified as critical has been detected in litestar-org Litestar up to 2.21.x. Affected is an unknown function of the component AllowedHostsMiddleware. This manipulation causes server-side request forgery.

This vulnerability is handled as CVE-2026-48061. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More