BerriAI

Trivy is a security scanner.

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution.

A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the `eval` function unsafely in the `litellm.get_secret()` method.

BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint.

LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint.

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit.

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution.

In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings.

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input.

In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key.

A Denial of Service (DoS) vulnerability exists in berriai/litellm version v1.44.5.

A vulnerability was determined in BerriAI litellm up to 1.82.2.

A weakness has been identified in BerriAI litellm up to 1.59.8.

An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm.

LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in…

BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint.

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint.

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10.

berriai/litellm version 1.34.34 is vulnerable to improper access control in its team management functionality.

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.