Cross-site Scripting (XSS)

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Cross-site Scripting XSS via the /sso/debug/callback endpoint in litellm/proxy/managementendpoints/uisso.py, where raw IdP claims - including bearer tokens that a...