25 matches found
CVE-2026-59938 vulnerabilities
Vulnerabilities for packages: litellm...
GHSA-55H5-XMCQ-C37V vulnerabilities
Vulnerabilities for packages: litellm...
GHSA-VJ7Q-GJH5-988W vulnerabilities
Vulnerabilities for packages: semgrep, litellm...
GHSA-HVRP-RF83-W775 vulnerabilities
Vulnerabilities for packages: semgrep, litellm...
Incorrect Authorization
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Incorrect Authorization in the userapikeyauth.py file of the M2M JWT Handler. An attacker can gain unauthorized access to resources by exploiting insufficient authorization...
CVE-2026-48156 vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
CVE-2026-48155 vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
CVE-2026-42203 vulnerabilities
Vulnerabilities for packages: airflow, litellm...
CVE-2026-42271 vulnerabilities
Vulnerabilities for packages: airflow, litellm...
CVE-2026-41314 vulnerabilities
Vulnerabilities for packages: open-webui, nemo, litellm...
GHSA-HP6R-R9VC-Q8WX vulnerabilities
Vulnerabilities for packages: litellm...
CVE-2025-14546 vulnerabilities
Vulnerabilities for packages: litellm...
GHSA-XQMJ-J6MV-4862 vulnerabilities
Vulnerabilities for packages: airflow, litellm...
GHSA-V4P8-MG3P-G94G vulnerabilities
Vulnerabilities for packages: airflow, litellm...
GHSA-7GW9-CF7V-778F vulnerabilities
Vulnerabilities for packages: open-webui, nemo, litellm...
GHSA-3CRG-W4F6-42MX vulnerabilities
Vulnerabilities for packages: open-webui, nemo, litellm...
GHSA-JJ6C-8H6C-HPPX vulnerabilities
Vulnerabilities for packages: open-webui, nemo, litellm...
CVE-2026-40260 vulnerabilities
Vulnerabilities for packages: open-webui, nemo, litellm...
Embedded Malicious Code
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Embedded Malicious Code. Vulnerable releases of this package were compromised with malicious code that conceals a multi-stage credential stealer and persistent backdoor. A...