Security Advisory

CVE-2024-10188

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-20 10:10:48
Last updated 2025-03-20 18:16:28
Assigner @huntr_ai
State PUBLISHED

Description

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.