-
Notifications
You must be signed in to change notification settings - Fork 293
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[GHSA-83pv-qr33-2vcf] Litestar and Starlite vulnerable to Path Traversal #4350
base: JacobCoffee/advisory-improvement-4350
Are you sure you want to change the base?
[GHSA-83pv-qr33-2vcf] Litestar and Starlite vulnerable to Path Traversal #4350
Conversation
Hi there @brian-edgar-re and @peterschutt! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository. This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory |
] | ||
], | ||
"database_specific": { | ||
"last_known_affected_version_range": "<= 1.51.14" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"last_known_affected_version_range": "<= 1.51.14" | |
"last_known_affected_version_range": "<= 1.51.15" |
Hi @JacobCoffee do you have any references for the addition of the starlite package? |
Hi @CallmeMari , seems @JacobCoffee wasn't able to see your message. By my side, I think he added that additional version because it wasn't included the fix in the expected version (1.51.15). https://github.com/litestar-org/litestar/releases/tag/v1.51.16 |
We released 1.51.15 before the patch was applied in order to test that our release pipeline for the 1.x series was still in good shape, it had been a while since we'd had to cut a release for that version. Patch subsequently released in 1.51.16. |
Updates
Comments
Add Starlite (v1) fix version