pypi

litellm

71 Total advisories

70 Vulnerabilities

1 Malware

Dependency scanning

Check whether litellm is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

litellm

Malware Advisories

Malicious code in litellm (PyPI)

Vulnerabilities

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints

BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure

BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader

BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

LiteLLM: MCP Proxy Has Improper Authentication

LiteLLM: Admin Key Handler Has Improper Authorization

LiteLLM: SSO Debug Flow Has Improper Authentication

LiteLLM: M2M JWT Handler Has Improper Authorization

LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

LiteLLM: Local file read via request-supplied OIDC file references

LiteLLM has a sandbox escape in custom-code guardrail

LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit

LiteLLM: Authenticated command execution via MCP stdio test endpoints

LiteLLM has SQL Injection in Proxy API key verification

LiteLLM Server-Side Request Forgery (SSRF) vulnerability

LiteLLM: Authentication Bypass via Host Header Injection

LiteLLM allows a user to modify their own user_role via the /user/update endpoint

LiteLLM: Server-Side Template Injection in /prompts/test endpoint

LiteLLM: Authentication bypass via OIDC userinfo cache key collision

LiteLLM: Password hash exposure and pass-the-hash authentication bypass

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail

LiteLLM Has a Leakage of Langfuse API Keys

LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request

litellm vulnerable to improper access control in team management

litellm vulnerable to remote code execution based on using eval unsafely

SQL injection in litellm

SQL injection in litellm

litellm passes untrusted data to `eval` function without sanitization

LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint

LiteLLM Reveals Portion of API Key via a Logging File

LiteLLM Has an Improper Authorization Vulnerability

LiteLLM Vulnerable to Denial of Service (DoS)

LiteLLM Vulnerable to Remote Code Execution (RCE)

Arbitrary file deletion in litellm

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

LiteLLM: Local file read via request-supplied OIDC file references

LiteLLM has a sandbox escape in custom-code guardrail

LiteLLM: Server-Side Template Injection in /prompts/test endpoint

LiteLLM allows a user to modify their own user_role via the /user/update endpoint

LiteLLM: Authenticated command execution via MCP stdio test endpoints

LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

LiteLLM Vulnerable to Denial of Service (DoS)

SQL injection in litellm

LiteLLM Reveals Portion of API Key via a Logging File

LiteLLM Has an Improper Authorization Vulnerability

LiteLLM Server-Side Request Forgery (SSRF) vulnerability

litellm passes untrusted data to `eval` function without sanitization

LiteLLM Has a Leakage of Langfuse API Keys

SQL injection in litellm

LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request

LiteLLM Vulnerable to Remote Code Execution (RCE)

Arbitrary file deletion in litellm

litellm vulnerable to improper access control in team management

LiteLLM has SQL Injection in Proxy API key verification

LiteLLM: Authentication bypass via OIDC userinfo cache key collision

litellm vulnerable to remote code execution based on using eval unsafely

LiteLLM: Authentication Bypass via Host Header Injection

LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint

Two LiteLLM versions published containing credential harvesting malware

Two litellm versions published containing credential harvesting malware

Browse more PyPI advisories

Start Securing