PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
litellm Malicious code in litellm (PyPI) Unknown 7 months ago 1 day ago
litellm LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials` High Risk 8.1 3 days ago 3 days ago
litellm LiteLLM vulnerable to reflected XSS in /sso/debug/callback Medium Risk 6.8 3 days ago 3 days ago
litellm LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key Critical 9.9 3 days ago 3 days ago
litellm LiteLLM has SQL Injection in Proxy API key verification Critical 9.8 6 months ago 25 days ago
litellm LiteLLM: SSO Debug Flow Has Improper Authentication High Risk 7.3 4 months ago 29 days ago
litellm BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens Medium Risk 6.3 4 months ago 29 days ago
litellm LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration Medium Risk 6.3 4 months ago 29 days ago
litellm LiteLLM: M2M JWT Handler Has Improper Authorization Medium Risk 5.0 4 months ago 29 days ago
litellm BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints Medium Risk 6.3 4 months ago 29 days ago
litellm BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader Medium Risk 6.3 4 months ago 29 days ago
litellm BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure Medium Risk 4.3 4 months ago 29 days ago
litellm LiteLLM: Admin Key Handler Has Improper Authorization Medium Risk 5.4 4 months ago 29 days ago
litellm LiteLLM Proxy has server-side request forgery via the `user_config` request parameter Medium Risk 6.0 1 month ago 29 days ago
litellm LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters Medium Risk 6.5 1 month ago 29 days ago
litellm LiteLLM: MCP Proxy Has Improper Authentication High Risk 7.3 4 months ago 29 days ago
litellm BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints Medium Risk 6.3 29 days ago 29 days ago
litellm LiteLLM: M2M JWT Handler Has Improper Authorization Medium Risk 5.0 29 days ago 29 days ago
litellm LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration Medium Risk 6.3 29 days ago 29 days ago
litellm BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens Medium Risk 6.3 29 days ago 29 days ago
litellm BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure Medium Risk 4.3 29 days ago 29 days ago
litellm LiteLLM Proxy has server-side request forgery via the `user_config` request parameter Unknown 29 days ago 29 days ago
litellm LiteLLM: MCP Proxy Has Improper Authentication High Risk 7.3 29 days ago 29 days ago
litellm LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters Medium Risk 6.5 29 days ago 29 days ago
litellm BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader Medium Risk 6.3 29 days ago 29 days ago
litellm LiteLLM: SSO Debug Flow Has Improper Authentication High Risk 7.3 29 days ago 29 days ago
litellm LiteLLM: Admin Key Handler Has Improper Authorization Medium Risk 5.4 29 days ago 29 days ago
litellm LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint Critical 9.8 2 months ago 1 month ago
litellm LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint Critical 9.8 1 month ago 1 month ago
litellm LiteLLM: Local file read via request-supplied OIDC file references Low Risk 3.0 3 months ago 1 month ago
litellm LiteLLM: Arbitrary file write via path traversal in Skills archive extraction Medium Risk 6.0 3 months ago 1 month ago
litellm LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks Low Risk 3.0 3 months ago 1 month ago
litellm LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback High Risk 8.0 3 months ago 1 month ago
litellm LiteLLM has a sandbox escape in custom-code guardrail High Risk 8.8 5 months ago 1 month ago
litellm LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit High Risk 8.8 5 months ago 1 month ago
litellm LiteLLM: Authenticated command execution via MCP stdio test endpoints High Risk 8.8 6 months ago 1 month ago
litellm LiteLLM Server-Side Request Forgery (SSRF) vulnerability High Risk 7.5 2 years ago 1 month ago
litellm LiteLLM: Authentication Bypass via Host Header Injection Critical 9.8 4 months ago 1 month ago
litellm LiteLLM allows a user to modify their own user_role via the /user/update endpoint High Risk 8.8 5 months ago 1 month ago
litellm LiteLLM: Server-Side Template Injection in /prompts/test endpoint High Risk 8.0 6 months ago 1 month ago
litellm LiteLLM: Authentication bypass via OIDC userinfo cache key collision Critical 9.5 7 months ago 1 month ago
litellm LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint High Risk 8.0 7 months ago 1 month ago
litellm LiteLLM: Password hash exposure and pass-the-hash authentication bypass High Risk 8.0 6 months ago 1 month ago
litellm LiteLLM Has a Leakage of Langfuse API Keys High Risk 7.5 1 year ago 1 month ago
litellm LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request High Risk 7.5 1 year ago 1 month ago
litellm SQL injection in litellm Medium Risk 4.9 2 years ago 1 month ago
litellm litellm vulnerable to remote code execution based on using eval unsafely Critical 9.8 2 years ago 1 month ago
litellm SQL injection in litellm Medium Risk 6.4 2 years ago 1 month ago
litellm litellm vulnerable to improper access control in team management Medium Risk 5.3 2 years ago 1 month ago
litellm litellm passes untrusted data to `eval` function without sanitization High Risk 7.2 2 years ago 1 month ago
Data courtesy of OSV.dev
Page 1