Litellm

Latest version: v1.65.1

Vulnerabilities (23)

CVE/PVE Vulnerability ID Advisory Affected versions Severity Severity Score
PVE-2025-75701 75701

Litellm 1.61.20 includes a security fix: Enforce model access restric…

  • <1.61.20
- -
CVE-2025-0628 76183

An improper authorization vulnerability exists in the main-latest ver…

  • <1.61.15
- -
PVE-2025-75331 75331

Litellm fixes a vulnerability where a user could update another user'…

  • <1.60.2dev1
- -
PVE-2025-75075 75075

A sensitive security token was inadvertently exposed in the Hugging F…

  • <1.58.4.dev1
- -
CVE-2024-6119 74775

Litellm 1.56.2 updates its dependency 'cryptography' to include a sec…

  • <1.56.2
- -
CVE-2024-22020 74713

LiteLLM has addressed the security vulnerability CVE-2024-22020 by up…

  • <1.55.8
- -
CVE-2024-10188 76299

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unau…

  • <1.53.1.dev1
- -
CVE-2025-0330 76182

In berriai/litellm version v1.52.1, an issue in proxy_server.py cause…

  • <1.52.1
- -
CVE-2024-6587 73303

A Server-Side Request Forgery (SSRF) vulnerability affects berriai/li…

  • <1.44.8
HIGH 7.5
CVE-2024-8984 76200

A Denial of Service (DoS) vulnerability exists in berriai/litellm ver…

  • <=1.44.5
- -
CVE-2024-4890 71721

Affected versions of Litellm are vulnerable to blind SQL Injection. T…

  • <1.44.17
MEDIUM 4.9
CVE-2024-4264 71722

Affected versions of berriai/litellm contains a Remote Code Execution…

  • <1.44.16
- -
CVE-2024-4889 71720

Affected versions of berriai/litellm contain a Code Injection vulnera…

  • <1.44.16
HIGH 7.2
CVE-2024-9606 76190

In berriai/litellm before version 1.44.12, the litellm/litellm_core_u…

  • <1.44.12
- -
PVE-2024-71424 71424

Affected version of Litellm are affected by a information disclosure …

  • <1.40.6
- -
CVE-2024-6825 76239

BerriAI/litellm version 1.40.12 contains a vulnerability that allows …

  • >=1.40.3.dev2,<1.40.12
- -
CVE-2024-5710 71848

berriai/litellm affected versions are vulnerable to improper access c…

  • <1.40.29
MEDIUM 6.5
CVE-2024-5225 71723

An SQL Injection vulnerability exists in the berriai/litellm reposito…

  • <1.40.0
HIGH 7.2
PVE-2024-69610 69610

Litellm version 1.35.20.dev2 resolves an issue where users could inad…

  • <1.35.20.dev2
- -
PVE-2024-67612 67612

Litellm version 1.35.1.dev1 introduces a low-severity security fix by…

  • <1.35.1.dev1
- -
PVE-2024-68072 68072

Affected versions of Litellm are vulnerable to improper authorization…

  • <1.35.18
- -
CVE-2024-4888 71651

Affected versions of BerriAI's litellm are vulnerable to arbitrary fi…

  • <1.35.18
HIGH 8.1
CVE-2024-2952 71650

BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI…

  • <1.34.42
- -