Skip to content
Sign in
7.5 High

CVE-2024-10188 A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service…

Description

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.

Affected products and versions

Product Affected versions Fixed in
berriai/litellm 1.53 earliest → < 1.53.1 1.53.1

Other CVEs of berriai/litellm

The 15 CVEs of berriai/litellm →
CVE-2024-6825 BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution 8.8 High CVE-2025-0628 An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm 8.1 High CVE-2025-0330 In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error… 7.5 High CVE-2024-9606 In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a… 7.5 High
Track this CVE