Lucene search
+L

9 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•15 views

LiteLLM: Authentication bypass via OIDC userinfo cache key collision

ImpactWhen JWT authentication is enabled enablejwtauth: true, the OIDC userinfo cache uses token:20 as the cache key. JWT headers produced by the same signing algorithm generate identical first 20 characters.This configuration option is not enabled by default. Most instances are not affected.An...

9.4CVSS6AI score0.00879EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder