25 matches found
fastrepl-client (0.0.1) potentially affected by CVE-2026-12773 via litellm (0.4.4)
litellm PYPI version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl-client 0.0.1 Source cves: CVE-2026-12773 Source advisory: OSV:PYSEC-2026-4067...
open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-12773 via litellm (0.7.10)
litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-12773 Source advisory: OSV:PYSEC-2026-4067...
fastrepl (>=0.0.17, <=0.0.18) potentially affected by CVE-2026-12773 via litellm (0.2.6)
litellm PYPI version 0.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl =0.0.17, =0.0.18 Source cves: CVE-2026-12773 Source advisory: OSV:PYSEC-2026-4067...
autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2026-12773 via litellm (0.1.7713)
litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2026-12773 Sourc...
0xpwn (0.1.1), a2a-acl (>=0.0.14, <=0.1.1) +757 more potentially affected by CVE-2026-12773 via litellm (>=1.0.0, <=1.83.14)
litellm PYPI version =1.0.0, =0.0.14, =0.0.14, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.2.1.10062025 - agent-memory-server 0.15.0 - agent-opt 0.0.1 and more Source cves: CVE-2026-12773 Source advisory: OSV:GHSA-4JCJ-7X88-M979...
prompt2model (0.0.9) potentially affected by CVE-2026-12773 via litellm (0.1.583)
litellm PYPI version 0.1.583 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - prompt2model 0.0.9 Source cves: CVE-2026-12773 Source advisory: OSV:GHSA-4JCJ-7X88-M979...
aaf (>=0.3.5, <=0.3.9), adaptiq (0.12.9) +555 more potentially affected by CVE-2026-12773 via litellm (>=1.0.0, <=1.81.15)
litellm PYPI version =1.0.0, =0.3.5, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.1.0, =0.51.4, =0.4.1, =0.1.0, =0.3.1, =0.3.11 and more Source cves: CVE-2026-12773 Source advisory: SNYK:PYTHON-LITELLM-17391912...
CVE-2026-12773
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...
CVE-2026-12773 BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...
HPESBST05000 rev.1 - HPE B-Series SANnav Management Portal, Multiple Vulnerabilities
Potential Security Impact: Local: Multiple Vulnerabilities; Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SANnav Management Software - Prior to v2.4.0b CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-12679 |...
CVE-2025-12773
creationtimestamp| type| source ---|---|--- 2026-02-03 03:17:21+00:00| seen| Telegram/CgBosmGjiUsFubMTPyQoIc-fq6HoQhesjtq1xv5gYNaUJw...
CVE-2025-12773 Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a
A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...
CVE-2025-12773
A vulnerability in update-reports-purge-settings.sh script logging for Brocade SANnav before 2.4.0a could allow the collection of SANnav database password in the system audit logs. The vulnerability could allow a remote authenticated attacker with access to the audit logs to access the Brocade...
EUVD-2021-12773
Malware in sbrugna...
CVE-2024-12773
The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...
CVE-2024-12773
creationtimestamp| type| source ---|---|--- 2025-01-27 06:02:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113898798754392142 2025-01-27 06:06:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113898815721237909 2025-01-27 06:15:52+00:00| seen|...
CVE-2024-12773 Altra Side Menu <= 2.0 - Admin+ SQL Injection
The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...
CVE-2019-12773
creationtimestamp| type| source ---|---|--- 2020-07-15 00:55:08+00:00| seen| https://t.me/cibsecurity/13471...
CVE-2019-12773
An issue was discovered in Verint Impact 360 15.1. At wfo/help/helppopup.jsp, the helpURL parameter can be changed to embed arbitrary content inside of an iFrame. Attackers may use this in conjunction with social engineering to embed malicious scripts or phishing pages on a site where this produc...
CVE-2019-12773
The CVE-2019-12773 issue affects Verint Impact 360 15.1, specifically the wfo/help/help_popup.jsp page where the helpURL parameter can be manipulated to embed arbitrary content inside an iframe. Root cause is improper handling of the helpURL parameter, enabling an attacker to craft a link that co...