Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

litellm

pypi

Library to easily interface with LLM API providers

View on github.com · View on pypi.org

Security Advisories for litellm in pypi

Moderate
9 days ago

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter GSA_kwCzR0hTQS1oeDh2LWc3OWYtOHc1Zs4AB5MI

pypi litellm
Critical
29 days ago

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint GSA_kwCzR0hTQS02d3ZmLTc3bTktNThybc4ABlrU

pypi litellm
Low
2 months ago

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks GSA_kwCzR0hTQS03Mm04LTltN20taDI3OM4ABfhc

pypi litellm
High
2 months ago

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback GSA_kwCzR0hTQS03NDg4LTZyMzItYzk1cc4ABfhb

pypi litellm
Low
2 months ago

LiteLLM: Local file read via request-supplied OIDC file references GSA_kwCzR0hTQS00ZzVtLWM5cjUtNDl4Zs4ABfha

pypi litellm
Moderate
2 months ago

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction GSA_kwCzR0hTQS01am1yLWdjcmotMmM5cc4ABfhZ

pypi litellm
Low
3 months ago

BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure GSA_kwCzR0hTQS1tMnY1LTc0dzItcWhjas4ABZOj

pypi litellm
Low
3 months ago

BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens GSA_kwCzR0hTQS13Mm1oLXFxOXEtNDUzeM4ABZOg

pypi litellm
Low
3 months ago

BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader GSA_kwCzR0hTQS1jNjkzLXg4OTgtNWc0aM4ABZOi

pypi litellm
Low
3 months ago

BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints GSA_kwCzR0hTQS1wODk3LXZmN2otZjVoOM4ABZOh

pypi litellm
Moderate
3 months ago

LiteLLM: SSO Debug Flow Has Improper Authentication GSA_kwCzR0hTQS1qMzdxLXE3cDktdnB3bc4ABZOf

pypi litellm
Moderate
3 months ago

LiteLLM: MCP Proxy Has Improper Authentication GSA_kwCzR0hTQS00amNqLTd4ODgtbTk3Oc4ABZOS

pypi litellm
Low
3 months ago

LiteLLM: M2M JWT Handler Has Improper Authorization GSA_kwCzR0hTQS1xbWYzLTQ3NjctNWZnM84ABZOO

pypi litellm
Low
3 months ago

LiteLLM: Admin Key Handler Has Improper Authorization GSA_kwCzR0hTQS02cXIzLTNnODktbTRqas4ABZOP

pypi litellm
Low
3 months ago

LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration GSA_kwCzR0hTQS1tZjUyLWo5NGctNzQ2bc4ABZON

pypi litellm
Critical
3 months ago

LiteLLM: Authentication Bypass via Host Header Injection GSA_kwCzR0hTQS00eHBjLXB2NHAtcG0zd84ABY2c

pypi litellm
High
4 months ago

LiteLLM allows a user to modify their own user_role via the /user/update endpoint GSA_kwCzR0hTQS13cGZwLWd3d2MtdndxNs4ABXOn

pypi litellm
High
4 months ago

LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit GSA_kwCzR0hTQS1xcmM0LTQ5Z3YtbXY5bc4ABXOv

pypi litellm
High
5 months ago

LiteLLM has a sandbox escape in custom-code guardrail GSA_kwCzR0hTQS13eHh4LWd2cXYteHA3cM4ABWkb

pypi litellm
High
5 months ago

LiteLLM: Authenticated command execution via MCP stdio test endpoints GSA_kwCzR0hTQS12NHA4LW1nM3AtZzk0Z84ABVx5

pypi litellm
Critical
5 months ago

LiteLLM has SQL Injection in Proxy API key verification GSA_kwCzR0hTQS1yNzVmLTV4OHAtcXZtY84ABVw0

pypi litellm
High
5 months ago

LiteLLM: Server-Side Template Injection in /prompts/test endpoint GSA_kwCzR0hTQS14cW1qLWo2bXYtNDg2Ms4ABVww

pypi litellm
High
6 months ago

LiteLLM: Password hash exposure and pass-the-hash authentication bypass GSA_kwCzR0hTQS02OXg4LWhyZ3EtZmpqOM4ABU3E

pypi litellm
Critical
6 months ago

LiteLLM: Authentication bypass via OIDC userinfo cache key collision GSA_kwCzR0hTQS1qamhjLXY3YzItNWhoNs4ABUt4

pypi litellm
High
6 months ago

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint GSA_kwCzR0hTQS01M21yLTZjOHEtOTc4Oc4ABUt3

pypi litellm
Critical
6 months ago

Two LiteLLM versions published containing credential harvesting malware GSA_kwCzR0hTQS01bWc3LTQ4NXEteG03Ns4ABULp

pypi litellm
High
over 1 year ago

LiteLLM Has a Leakage of Langfuse API Keys GSA_kwCzR0hTQS04Nzl2LWZnZ20tdnh3Ms4ABFvr

pypi litellm
High
over 1 year ago

LiteLLM Has an Improper Authorization Vulnerability GSA_kwCzR0hTQS1mamNmLTNqM3ItNzhycM4ABFva

pypi litellm
High
over 1 year ago

LiteLLM Reveals Portion of API Key via a Logging File GSA_kwCzR0hTQS1nNXBnLTczZmMtaGp3cc4ABFvs

pypi litellm
High
over 1 year ago

LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request GSA_kwCzR0hTQS1maDJjLTg2eG0tcG0yeM4ABFtI

pypi litellm
High
over 1 year ago

LiteLLM Vulnerable to Remote Code Execution (RCE) GSA_kwCzR0hTQS01M2doLXA4amMtN3JnOM4ABFto

pypi litellm
High
over 1 year ago

LiteLLM Vulnerable to Denial of Service (DoS) GSA_kwCzR0hTQS1ndzJxLXF3OWotcmd2N84ABFq6

pypi litellm
High
about 2 years ago

LiteLLM Server-Side Request Forgery (SSRF) vulnerability GSA_kwCzR0hTQS1nMjZqLTUzODUtaGh3M84AA_if

pypi litellm
Critical
about 2 years ago

litellm vulnerable to remote code execution based on using eval unsafely GSA_kwCzR0hTQS1ncHBnLWdxdzgtd2g5Z84AA9Z3

pypi litellm
Moderate
about 2 years ago

litellm vulnerable to improper access control in team management GSA_kwCzR0hTQS1xcWN2LXZnOWYtNXJyM84AA9Z6

pypi litellm
Moderate
over 2 years ago

SQL injection in litellm GSA_kwCzR0hTQS1oNm02LWpqOHYtOTRqas4AA8xW

pypi litellm
Moderate
over 2 years ago

SQL injection in litellm GSA_kwCzR0hTQS04ajQyLXBjZm0tMzQ2N84AA8xM

pypi litellm
High
over 2 years ago

Arbitrary file deletion in litellm GSA_kwCzR0hTQS0zeHI4LXFmdmotOXA5as4AA8xH

pypi litellm
High
over 2 years ago

litellm passes untrusted data to `eval` function without sanitization GSA_kwCzR0hTQS03Z2dtLTRyamctNTk0d84AA8R2

pypi litellm
Critical
over 2 years ago

LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint GSA_kwCzR0hTQS00NmNtLXBmd3YtY2dmOM4AA64p

pypi litellm

Filter by Severity

High 17 Low 9 Moderate 7 Critical 7