CVE-2024-10188

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service DoS by exploiting the use of ast.literaleval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server...

CVE-2024-10188: Uncontrolled Resource Consumption

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service DoS by exploiting the use of ast.literaleval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server...

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.21-i586-1slack15.0.txz: Upgraded. This update fixes security issues: gh-126623: Upgraded libexpat to 2.6.4 to fix...

cpython3:fuzz_ast_literal_eval: Heap-buffer-overflow in tok_get_normal_mode

Project: https://github.com/python/cpython.git Detailed Report: https://oss-fuzz.com/testcase?key=5570516294696960 Project: cpython3 Fuzzing Engine: afl Fuzz Target: fuzzastliteraleval Job Type: aflasancpython3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...