Litestar's AllowedHosts has a validation bypass due to unescaped regex metacharacters in configured host patterns
Moderate severity
GitHub Reviewed
Published
Feb 8, 2026
in
litestar-org/litestar
•
Updated Feb 9, 2026
Give feedback on Dependabot alerts