CVE-2026-59938 vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

GHSA-55H5-XMCQ-C37V vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

GHSA-VJ7Q-GJH5-988W vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, litellm, lmcache-cuda-12.8, semgrep...

GHSA-HVRP-RF83-W775 vulnerabilities

Vulnerabilities for packages: litellm, semgrep...

Server-side Request Forgery (SSRF)

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the loadopenapispecasync function of the MCP OpenAPI Spec Loader component when processing the specpath argument. An attacker can access...

Incorrect Authorization

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Incorrect Authorization in the userapikeyauth.py file of the M2M JWT Handler. An attacker can gain unauthorized access to resources by exploiting insufficient authorization...

CVE-2026-48155 vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

CVE-2026-48156 vulnerabilities

Vulnerabilities for packages: litellm, open-webui...

CVE-2026-42203 vulnerabilities

Vulnerabilities for packages: litellm, airflow...

CVE-2026-42271 vulnerabilities

Vulnerabilities for packages: litellm, airflow...

CVE-2026-41314 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-HP6R-R9VC-Q8WX vulnerabilities

Vulnerabilities for packages: litellm...

CVE-2025-14546 vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-V4P8-MG3P-G94G vulnerabilities

Vulnerabilities for packages: litellm, airflow...

GHSA-XQMJ-J6MV-4862 vulnerabilities

Vulnerabilities for packages: litellm, airflow...

GHSA-7GW9-CF7V-778F vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-3CRG-W4F6-42MX vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

GHSA-JJ6C-8H6C-HPPX vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

CVE-2026-40260 vulnerabilities

Vulnerabilities for packages: litellm, nemo, open-webui...

Embedded Malicious Code

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Embedded Malicious Code. Vulnerable releases of this package were compromised with malicious code that conceals a multi-stage credential stealer and persistent backdoor. A...