litellm vulnerabilities

Library to easily interface with LLM API providers

1.76.3

2 years ago

2 days ago

Known vulnerabilities in the litellm package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M SQL Injection	[1.48.18,1.74.9.dev2)
M SQL Injection	[,1.67.4.dev1)
H Incorrect Permission Assignment for Critical Resource	[,1.64.1)
H Denial of Service (DoS)	[,1.53.1)
H Improper Output Neutralization for Logs	[,1.44.12)
H Improper Authorization	[,1.61.15)
H Allocation of Resources Without Limits or Throttling	[,1.56.2)
H Arbitrary Command Injection	[,1.65.5)
H Exposure of Sensitive Information Through Metadata	[,1.65.5)
H Incorrect Permission Assignment for Critical Resource	[,1.60.4)
H Server-Side Request Forgery (SSRF)	[,1.44.8)
C Code Injection	[,1.40.16)
H Code Injection	[,1.34.39)
M SQL Injection	[,1.40.0)
M SQL Injection	[,1.49.6)
H Improper Control of Generation of Code ('Code Injection')	[,1.40.16)
M Improper Access Control	[,1.35.1)
M Improper Access Control	[,1.35.18)
C Improper Neutralization of Special Elements used in a Template Engine ('Template Injection')	[,1.34.42)

1223 VERSIONS IN TOTAL See all versions