| CVE-2026-42203 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
8.6
Élevée
|
8 mai 2026 |
| CVE-2026-42271 |
Exploitée
BerriAI LiteLLM Command Injection Vulnerability
|
8.7
Élevée
|
8 mai 2026 |
| CVE-2026-40217 |
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…
|
8.8
Élevée
|
10 avr. 2026 |
| CVE-2026-35030 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
9.4
Critique
|
6 avr. 2026 |
| CVE-2026-35029 |
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
|
8.7
Élevée
|
6 avr. 2026 |
| CVE-2026-33634 |
Exploitée
Aquasecurity Trivy Embedded Malicious Code Vulnerability
|
9.4
Critique
|
23 mars 2026 |
| CVE-2024-6587 |
A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10
|
7.5
Élevée
|
13 sept. 2024 |
| CVE-2024-42679 |
SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to…
|
7.8
Élevée
|
15 août 2024 |
| CVE-2024-5710 |
berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality
|
5.3
Moyenne
|
27 juin 2024 |
| CVE-2024-5751 |
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution
|
9.8
Critique
|
27 juin 2024 |
| CVE-2024-4888 |
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on…
|
6.5
Moyenne
|
6 juin 2024 |
| CVE-2024-4890 |
A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update'…
|
4.9
Moyenne
|
6 juin 2024 |
| CVE-2024-4889 |
A code injection vulnerability exists in the berriai/litellm application, version 1.34.6, due to the use of…
|
7.2
Élevée
|
6 juin 2024 |
| CVE-2024-4264 |
A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the…
|
9.8
Critique
|
18 mai 2024 |
| CVE-2024-2952 |
BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint
|
9.8
Critique
|
10 avr. 2024 |