Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow

Litestar and Starlite affected by Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Litestar: HTML Injection Through CSRF Token

X-Forwarded-For Header Spoofing Bypasses Litestar Rate Limiting

Litestar allows unbounded resource consumption (DoS vulnerability)

FileStore key canonicalization collisions allow response cache mixup/poisoning (ASCII ord + Unicode NFKD)

Litestar has an AllowedHosts validation bypass due to unescaped regex metacharacters in configured host patterns

Litestar has a CORS origin allowlist bypass due to unescaped regex metacharacters in allowed origins

Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host header