LiteLLM vulnerable to reflected XSS in /sso/debug/callback

Summary The /sso/debug/callback endpoint reflected identity-provider-controlled fields into an inline block via json.dumps, which escapes JSON string syntax but not HTML context characters such as . An IdP-returned string field containing for example a user-editable display name closed the script...