PT-2026-100561

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101676

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100911

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102167

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102161

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102175

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101413

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101402

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101331

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101564

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

python313-litellm-1.101.0-1.1 on GA media (moderate)

python313-litellm-1.101.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11800-1 Rating: moderate Cross-References: CVE-2026-84377 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

PT-2026-101687

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

EUVD-2026-80986

LiteLLM Proxy has server-side request forgery via the userconfig request parameter...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2026-59823 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2026-59823 Source advisory: OSV:GHSA-HX8V-G79F-8W5F...

open-interpreter (>=0.1.8, <=0.1.9), openplugin (>=0.0.25, <=0.0.27) potentially affected by CVE-2026-59823 via litellm (0.7.10)

litellm PYPI version 0.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.8, =0.0.25, =0.0.27 Source cves: CVE-2026-59823 Source advisory: OSV:GHSA-HX8V-G79F-8W5F...

GHSA-HX8V-G79F-8W5F LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

0xpwn (0.1.1), a2a-acl (0.0.14) +745 more potentially affected by CVE-2026-59823 via litellm (>=1.0.0, <=1.83.8)

litellm PYPI version =1.0.0, =0.3.5, =0.7.3, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.1.0, =0.1.1 and more Source cves: CVE-2026-59823 Source advisory: OSV:GHSA-HX8V-G79F-8W5F...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2026-59823 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2026-59823 Source advisory: OSV:GHSA-HX8V-G79F-8W5F...

vimgpt (0.1.2) potentially affected by CVE-2026-59823 via litellm (0.1.618)

litellm PYPI version 0.1.618 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - vimgpt 0.1.2 Source cves: CVE-2026-59823 Source advisory: OSV:GHSA-HX8V-G79F-8W5F...