Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
added 2026/08/27 9:31 p.m.6 views

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

BerriAI litellm =1.82.4 is vulnerable to Server-Side Template Injection SSTI, which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotpromptcontent parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment...

9.8CVSS0.00548EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder