~ / search / GHSA-gw2q-qw9j-rgv7

GHSA-gw2q-qw9j-rgv7

LiteLLM Vulnerable to Denial of Service (DoS)

Source: GitHub Advisory Database (reviewed) High CVE-2024-10188

Packages

EcosystemPackageAffectedFixed in
PyPI litellm < 1.53.1.dev1 1.53.1.dev1

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.

References

External links from the advisory. They lead to third-party sites.