litellm-1.83

Direct Vulnerabilities

Known vulnerabilities in the litellm-1.83 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Insufficient Verification of Data Authenticity	*
L Improper Handling of Windows Device Names	<1.83.10-r0
L Arbitrary Code Injection	<1.83.14-r1
L Memory Leak	*
L Resource Exhaustion	<1.83.10-r0
H CVE-2026-93355	*
H Information Exposure Through Caching	<1.83.10-r0
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
L GHSA-chx6-46f5-w4vp	*
L GHSA-c2m8-h5v5-343r	*
L GHSA-3hv7-mjh2-fv65	*
H Incorrect Authorization	*
M Inefficient Regular Expression Complexity	*
L Modification of Assumed-Immutable Data (MAID)	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Allocation of Resources Without Limits or Throttling	*
L Improper Certificate Validation	*
H Uncaught Exception	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Handling of Exceptional Conditions	*
M Incorrect Behavior Order: Validate Before Canonicalize	*
C Information Exposure	*
L Improper Verification of Cryptographic Signature	*
L CVE-2026-49265	*
L Insufficient Comparison	<1.83.10-r0
L Improper Verification of Cryptographic Signature	*
L CVE-2026-49264	*
L Resource Exhaustion	<1.83.10-r0
L Insufficient Comparison	<1.83.10-r0
L Allocation of Resources Without Limits or Throttling	*
L Incorrect Privilege Assignment	*
L Improper Certificate Validation	*
L Information Exposure	*
L Server-Side Request Forgery (SSRF)	<1.83.10-r0
L CVE-2026-37004	<1.83.10-r0
L Server-Side Request Forgery (SSRF)	*
L Resource Exhaustion	*
M Algorithmic Complexity	*
M Improper Resource Shutdown or Release	<1.83.10-r0
L Excessive Iteration	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L GHSA-wwv5-g3v4-889x	*
L GHSA-8423-8fgw-73vq	*
L Asymmetric Resource Consumption (Amplification)	*
L Incomplete Blacklist	*
L CVE-2026-9496	<1.83.10-r0
L Excessive Iteration	*
L Resource Exhaustion	*
L Out-of-bounds Read	*
L Improper Certificate Validation	*
L Information Exposure	*
L Improper Input Validation	<1.83.10-r0
L HTTP Request Smuggling	*
L Improper Input Validation	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L GHSA-r292-9mhp-454m	<1.83.10-r0
L Resource Exhaustion	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Uncontrolled Memory Allocation	*
L Resource Exhaustion	*
H Improper Authentication	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Out-of-bounds Write	<1.83.10-r0
L Integer Overflow or Wraparound	<1.83.10-r0
H Allocation of Resources Without Limits or Throttling	<1.83.10-r0
L Integer Overflow or Wraparound	<1.83.10-r0
C Out-of-bounds Read	<1.83.10-r0
L Out-of-bounds Read	<1.83.10-r0
L Uncontrolled Memory Allocation	<1.83.10-r0
L Uncontrolled Memory Allocation	<1.83.10-r0
L Uncaught Exception	<1.83.10-r0
L OS Command Injection	<1.83.10-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.83.10-r0
L Uncontrolled Memory Allocation	<1.83.10-r0
L Incorrect Type Conversion or Cast	<1.83.10-r0
L Allocation of Resources Without Limits or Throttling	<1.83.10-r0
L Uncontrolled Memory Allocation	<1.83.10-r0
L Loop with Unreachable Exit Condition ('Infinite Loop')	<1.83.10-r0
L Resource Exhaustion	<1.83.10-r0
L Origin Validation Error	*
L Missing Authorization	*
L Authorization Bypass Through User-Controlled Key	*
L Allocation of Resources Without Limits or Throttling	*
L Directory Traversal	<1.83.10-r0
L External Control of File Name or Path	<1.83.10-r0
L Use of Incorrectly-Resolved Name or Reference	*
L Improper Input Validation	*
H Improper Resource Shutdown or Release	*
L Improper Handling of Highly Compressed Data (Data Amplification)	*
L GHSA-jm82-fx9c-mx94	*
L Improper Initialization	*
L Allocation of Resources Without Limits or Throttling	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Excessive Iteration	*
L Algorithmic Complexity	*
L Allocation of Resources Without Limits or Throttling	*
L Resource Exhaustion	*
L Interpretation Conflict	*
L CRLF Injection	*
M Open Redirect	*
L Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	*
L Improper Verification of Cryptographic Signature	*
L Allocation of Resources Without Limits or Throttling	*
L Resource Exhaustion	*
L Improper Validation of Certificate with Host Mismatch	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Validation of Specified Quantity in Input	*
L Unintended Proxy or Intermediary ('Confused Deputy')	*
M Allocation of Resources Without Limits or Throttling	*
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Cleanup on Thrown Exception	*
M Resource Exhaustion	*
L Insufficient Verification of Data Authenticity	<1.83.10-r0
L Improper Verification of Cryptographic Signature	<1.83.10-r0
L Buffer Over-read	<1.83.14-r1
L GHSA-4xgf-cpjx-pc3j	<1.83.14-r1
L GHSA-pw6j-qg29-8w7f	<1.83.14-r1
L GHSA-98x5-vq43-vc5p	<1.83.14-r1
L Improper Verification of Cryptographic Signature	<1.83.10-r0
L Information Exposure	<1.83.14-r1
L Resource Exhaustion	*
L Allocation of Resources Without Limits or Throttling	*
L Improper Handling of Highly Compressed Data (Data Amplification)	<1.83.14-r1
L Improper Authentication	*
L Authentication Bypass	*
M HTTP Request Smuggling	*
L Interpretation Conflict	<1.83.10-r0
H Origin Validation Error	*
H Deserialization of Untrusted Data	*
M Inefficient Regular Expression Complexity	<1.83.14-r1
L Unprotected Alternate Channel	<1.83.10-r0
H Incorrect Authorization	<1.83.14-r0
H Incorrect Authorization	<1.83.10-r0
M Information Exposure	<1.83.14-r1
H Improper Handling of Highly Compressed Data (Data Amplification)	<1.83.14-r1
L Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	<1.83.10-r0
M Heap-based Buffer Overflow	<1.83.10-r0
H Integer Overflow or Wraparound	<1.83.10-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1.83.10-r0
M Integer Overflow or Wraparound	<1.83.10-r0
L Allocation of Resources Without Limits or Throttling	<1.83.14-r0
H Allocation of Resources Without Limits or Throttling	<1.83.14-r0
M Resource Exhaustion	<1.83.14-r0
M HTTP Response Splitting	<1.83.14-r0
L Insufficient Verification of Data Authenticity	<1.83.14-r0
M Improper Input Validation	<1.83.14-r0
M HTTP Response Splitting	<1.83.14-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.83.14-r0
M Allocation of Resources Without Limits or Throttling	<1.83.14-r0
M Allocation of Resources Without Limits or Throttling	<1.83.14-r0
M Information Exposure	<1.83.14-r0
L HTTP Response Splitting	<1.83.14-r0
L Resource Exhaustion	<1.83.14-r0
H Directory Traversal	<1.83.10-r0
L CVE-2025-14546	<1.83.10-r0
C Out-of-Bounds	<1.83.10-r0
H Inefficient Regular Expression Complexity	<1.83.10-r0
H Improper Neutralization of Special Elements Used in a Template Engine	<1.83.10-r0
L Directory Traversal	<1.83.10-r0
C SQL Injection	<1.83.10-r0
H Arbitrary Command Injection	<1.83.10-r0
L Link Following	<1.83.14-r0
M Directory Traversal	<1.83.10-r0
M Excessive Iteration	<1.83.14-r0
L CVE-2025-67221	<1.83.14-r0
M Uncontrolled Memory Allocation	<1.83.14-r0
H Directory Traversal	<1.83.10-r0
L Resource Exhaustion	<1.83.10-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<1.83.10-r0
M Directory Traversal	<1.83.10-r0
L Inefficient Regular Expression Complexity	<1.83.10-r0
M Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<1.83.14-r0
L Inefficient Regular Expression Complexity	<1.83.10-r0
L Inefficient Regular Expression Complexity	<1.83.10-r0
H Resource Exhaustion	<1.83.10-r0
M Excessive Iteration	<1.83.14-r0
M Uncontrolled Memory Allocation	<1.83.14-r0
L Algorithmic Complexity	<1.83.10-r0
M Improper Certificate Validation	<1.83.10-r0

Vulnerability

Vulnerable Version

Insufficient Verification of Data Authenticity