Lucene search
+L

1 matches found

OSV
OSV
added 2024/06/27 9:32 p.m.13 views

GHSA-GPPG-GQW8-WH9G litellm vulnerable to remote code execution based on using eval unsafely

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the adddeployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sendin...

9.8CVSS7.4AI score0.00875EPSS
SaveExploits0References5
Rows per page
Query Builder