CVE-2024-2952

BerriAI/litellm is vulnerable to Server-Side Template Injection SSTI via the "/completions" endpoint. The vulnerability arises from the "hfchattemplate" method processing the "chattemplate" parameter from the "tokenizerconfig.json" file through the Jinja template engine without proper sanitizatio...

CVE-2024-2952: Improper Neutralization of Equivalent Special Elements

BerriAI/litellm is vulnerable to Server-Side Template Injection SSTI via the /completions endpoint. The vulnerability arises from the hfchattemplate method processing the chattemplate parameter from the tokenizerconfig.json file through the Jinja template engine without proper sanitization...

LiteLLM 安全漏洞

LiteLLM is an open source application from Berri AI. All LLM APIs can be called using the OpenAI format. LiteLLM has a security vulnerability that stems from the lack of proper cleanup of file parameters and is susceptible to server-side template injection SSTI attacks...

PT-2024-22934

Name of the Vulnerable Software and Affected Versions BerriAI/litellm affected versions not specified Description The issue arises from the hf chat template method processing the chat template parameter from the tokenizer config.json file through the Jinja template engine without proper...