[{"data":1,"prerenderedAt":565},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-litellm-e00b5c8b":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":210,"related":239},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:22:54.231Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:21:22.165Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":82,"category":83,"aiRelevant":84,"provider":85,"repositoryCount":34,"occurrenceCount":34,"directRepositoryCount":32,"versionCount":34,"licenseExpressions":86,"advisoryIds":88,"advisoryCount":101,"verifiedAttestation":45,"repositories":102,"versions":131},"package:pypi:litellm","litellm-e00b5c8b","pypi:litellm","pypi","litellm","LiteLLM","model-api",true,null,[87],"MIT",[89,90,91,92,93,94,95,96,97,98,99,100],"GHSA-4g5m-c9r5-49xf","GHSA-4xpc-pv4p-pm3w","GHSA-53mr-6c8q-9789","GHSA-5jmr-gcrj-2c9q","GHSA-69x8-hrgq-fjj8","GHSA-72m8-9m7m-h278","GHSA-7488-6r32-c95q","GHSA-fh2c-86xm-pm2x","GHSA-fjcf-3j3r-78rp","GHSA-jjhc-v7c2-5hh6","GHSA-qrc4-49gv-mv9m","GHSA-wpfp-gwwc-vwq6",12,[103,110,117,124],{"id":104,"slug":105,"name":106,"pathWithNamespace":107,"versions":108,"evidenceCount":32},"opencode:7781","opencode-7781","kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",[109],"1.67.4.dev1",{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":115,"evidenceCount":32},"opencode:5530","opencode-5530","GSA Extraction","uba-ki-lab\u002Fgsa-extraction",[116],"1.73.6.post1",{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":122,"evidenceCount":32},"opencode:5012","opencode-5012","LLM Testframework","uba-ki-lab\u002Fllm-testframework",[123],"1.68.0",{"id":125,"slug":126,"name":127,"pathWithNamespace":128,"versions":129,"evidenceCount":32},"opencode:4112","opencode-4112","Objection management","uba-ki-lab\u002Fobjection-management",[130],"1.53.7",[132,168,182,196],{"version":130,"repositoryCount":32,"occurrenceCount":32,"ageDays":133,"advisoryIds":134,"metadata":135},615,[89,90,91,92,93,94,95,96,97,98,99,100],{"state":136,"checkedAt":137,"publishedAt":138,"deprecated":45,"deprecatedReason":85,"licenses":139,"advisoryIds":140,"links":152,"relatedProjects":162,"attestations":166,"verifiedAttestation":45,"projectStatus":167},"resolved","2026-08-13T02:29:21.454Z","2024-12-05T08:32:02Z",[87],[89,90,91,92,93,94,95,96,97,98,99,100,141,142,143,144,145,146,147,148,149,150,151],"PYSEC-2026-1545","PYSEC-2026-1546","PYSEC-2026-2597","PYSEC-2026-2598","PYSEC-2026-2600","PYSEC-2026-3476","PYSEC-2026-3477","PYSEC-2026-3478","PYSEC-2026-3479","PYSEC-2026-388","PYSEC-2026-390",[153,156,159],{"label":154,"url":155},"DOCUMENTATION","https:\u002F\u002Fdocs.litellm.ai\u002F",{"label":157,"url":158},"HOMEPAGE","https:\u002F\u002Flitellm.ai\u002F",{"label":160,"url":161},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm",[163],{"id":164,"relationType":160,"relationProvenance":165},"github.com\u002Fberriai\u002Flitellm","UNVERIFIED_METADATA",[],"active",{"version":109,"repositoryCount":32,"occurrenceCount":32,"ageDays":169,"advisoryIds":170,"metadata":171},473,[89,90,91,92,93,94,95,98,99,100],{"state":136,"checkedAt":137,"publishedAt":172,"deprecated":45,"deprecatedReason":85,"licenses":173,"advisoryIds":174,"links":175,"relatedProjects":179,"attestations":181,"verifiedAttestation":45,"projectStatus":167},"2025-04-27T02:36:07Z",[87],[89,90,91,92,93,94,95,98,99,100,143,144,145,146,147,148,149,150,151],[176,177,178],{"label":160,"url":161},{"label":154,"url":155},{"label":157,"url":158},[180],{"id":164,"relationType":160,"relationProvenance":165},[],{"version":123,"repositoryCount":32,"occurrenceCount":32,"ageDays":183,"advisoryIds":184,"metadata":185},465,[89,90,91,92,93,94,95,98,99,100],{"state":136,"checkedAt":137,"publishedAt":186,"deprecated":45,"deprecatedReason":85,"licenses":187,"advisoryIds":188,"links":189,"relatedProjects":193,"attestations":195,"verifiedAttestation":45,"projectStatus":167},"2025-05-04T05:41:44Z",[87],[89,90,91,92,93,94,95,98,99,100,143,144,145,146,147,148,149,150,151],[190,191,192],{"label":154,"url":155},{"label":157,"url":158},{"label":160,"url":161},[194],{"id":164,"relationType":160,"relationProvenance":165},[],{"version":116,"repositoryCount":32,"occurrenceCount":32,"ageDays":197,"advisoryIds":198,"metadata":199},405,[89,90,91,92,93,94,95,98,99,100],{"state":136,"checkedAt":137,"publishedAt":200,"deprecated":45,"deprecatedReason":85,"licenses":201,"advisoryIds":202,"links":203,"relatedProjects":207,"attestations":209,"verifiedAttestation":45,"projectStatus":167},"2025-07-04T00:34:40Z",[87],[89,90,91,92,93,94,95,98,99,100,143,144,145,146,147,148,149,150,151],[204,205,206],{"label":160,"url":161},{"label":154,"url":155},{"label":157,"url":158},[208],{"id":164,"relationType":160,"relationProvenance":165},[],{"occurrences":211,"occurrenceCount":34},[212,219,227,233],{"id":213,"repositoryId":111,"repositorySlug":112,"repositoryName":113,"repositoryPathWithNamespace":114,"ecosystem":80,"name":81,"identity":79,"version":116,"versionKey":214,"direct":85,"development":85,"sourceKind":215,"filePath":54,"blobSha":216,"sourceUrl":217,"commitSha":218},"component:87141138cb70fa11ff2eb1da","pypi:litellm@1.73.6.post1","uv-lock","fbb23733e647554b5678500b3f17f13bac7f77f5","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fgsa-extraction\u002F-\u002Fblob\u002Ff5161e79d3f8c53877f9b1b0d72e1c10bff775ba\u002Fuv.lock","f5161e79d3f8c53877f9b1b0d72e1c10bff775ba",{"id":220,"repositoryId":104,"repositorySlug":105,"repositoryName":106,"repositoryPathWithNamespace":107,"ecosystem":80,"name":81,"identity":79,"version":109,"versionKey":221,"direct":84,"development":45,"sourceKind":222,"filePath":223,"blobSha":224,"sourceUrl":225,"commitSha":226},"component:7de6abdb7189d478a342adb0","pypi:litellm@1.67.4.dev1","exact-manifest-pin","docker\u002Fbuild_from_pip\u002Frequirements.txt","71e038b62670a19b1c2d641b48f120ac3ef72546","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fdocker\u002Fbuild_from_pip\u002Frequirements.txt","4a5cd798be9b97cc1bff7b30d930eafda774e380",{"id":228,"repositoryId":118,"repositorySlug":119,"repositoryName":120,"repositoryPathWithNamespace":121,"ecosystem":80,"name":81,"identity":79,"version":123,"versionKey":229,"direct":85,"development":85,"sourceKind":215,"filePath":54,"blobSha":230,"sourceUrl":231,"commitSha":232},"component:5f9a3679ea2f28e35255bd9f","pypi:litellm@1.68.0","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","e8d6e99a1fa63b264e727acb553ed9b1499789b1",{"id":234,"repositoryId":125,"repositorySlug":126,"repositoryName":127,"repositoryPathWithNamespace":128,"ecosystem":80,"name":81,"identity":79,"version":130,"versionKey":235,"direct":85,"development":85,"sourceKind":215,"filePath":54,"blobSha":236,"sourceUrl":237,"commitSha":238},"component:bf5c4eb342726fa48f5724db","pypi:litellm@1.53.7","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","5c1425bf9990cf12c5ae8ada47d249710703af18",{"repositories":240,"vulnerabilities":249},[241,243,245,247],{"id":104,"slug":105,"name":106,"pathWithNamespace":107,"versions":242,"evidenceCount":32},[109],{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":244,"evidenceCount":32},[116],{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":246,"evidenceCount":32},[123],{"id":125,"slug":126,"name":127,"pathWithNamespace":128,"versions":248,"evidenceCount":32},[130],[250,280,314,335,362,377,402,428,453,476,497,534],{"id":89,"slug":251,"dossier":45,"summary":252,"aliases":253,"sourceIds":255,"published":256,"modified":257,"checkedAt":7,"severity":258,"references":262,"versionKeys":279,"packageCount":32,"repositoryCount":34},"ghsa-4g5m-c9r5-49xf-40cc28b0","LiteLLM: Local file read via request-supplied OIDC file references",[254,146],"CVE-2026-59819",[89,146],"2026-07-22T22:38:04Z","2026-07-23T15:11:50.258485894Z",[259],{"type":260,"score":261},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[263,266,269,271,273,275,277],{"type":264,"url":265},"WEB","https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",{"type":267,"url":268},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59819",{"type":264,"url":270},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25592",{"type":272,"url":161},"PACKAGE",{"type":264,"url":274},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.10-stable",{"type":272,"url":276},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flitellm",{"type":267,"url":278},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",[235,221,229,214],{"id":90,"slug":281,"dossier":45,"summary":282,"aliases":283,"sourceIds":285,"published":286,"modified":287,"checkedAt":7,"severity":288,"references":294,"versionKeys":313,"packageCount":32,"repositoryCount":34},"ghsa-4xpc-pv4p-pm3w-c72dbf83","LiteLLM: Authentication Bypass via Host Header Injection",[284,150],"CVE-2026-49468",[90,150],"2026-06-16T23:38:26Z","2026-07-18T17:30:30.617013067Z",[289,292],{"type":290,"score":291},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":260,"score":293},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[295,297,299,301,303,304,306,308,310,311],{"type":264,"url":296},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":267,"url":298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49468",{"type":264,"url":300},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49468",{"type":264,"url":302},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491520",{"type":272,"url":161},{"type":264,"url":305},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.84.0",{"type":267,"url":307},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":264,"url":309},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flitellm\u002FPYSEC-2026-388.yaml",{"type":272,"url":276},{"type":264,"url":312},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49468.json",[235,221,229,214],{"id":91,"slug":315,"dossier":45,"summary":316,"aliases":317,"sourceIds":319,"published":320,"modified":321,"checkedAt":7,"severity":322,"references":325,"versionKeys":334,"packageCount":32,"repositoryCount":34},"ghsa-53mr-6c8q-9789-034179e7","LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint",[318,143],"CVE-2026-35029",[91,143],"2026-04-03T21:59:31Z","2026-07-13T16:43:01.087747831Z",[323],{"type":260,"score":324},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:L\u002FSI:L\u002FSA:N",[326,328,330,331,332],{"type":264,"url":327},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",{"type":267,"url":329},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35029",{"type":272,"url":161},{"type":272,"url":276},{"type":267,"url":333},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",[235,221,229,214],{"id":92,"slug":336,"dossier":45,"summary":337,"aliases":338,"sourceIds":340,"published":341,"modified":342,"checkedAt":7,"severity":343,"references":346,"versionKeys":361,"packageCount":32,"repositoryCount":34},"ghsa-5jmr-gcrj-2c9q-651d4e44","LiteLLM: Arbitrary file write via path traversal in Skills archive extraction",[339,147],"CVE-2026-59820",[92,147],"2026-07-22T22:37:15Z","2026-07-23T15:11:39.917682016Z",[344],{"type":260,"score":345},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[347,349,351,353,355,356,358,359],{"type":264,"url":348},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",{"type":267,"url":350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59820",{"type":264,"url":352},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25475",{"type":264,"url":354},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F6a15adcd64137d37f73dee76dfe7481f8c2d9196",{"type":272,"url":161},{"type":264,"url":357},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.7-stable",{"type":272,"url":276},{"type":267,"url":360},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",[235,221,229,214],{"id":93,"slug":363,"dossier":45,"summary":364,"aliases":365,"sourceIds":366,"published":367,"modified":368,"checkedAt":7,"severity":369,"references":372,"versionKeys":376,"packageCount":32,"repositoryCount":34},"ghsa-69x8-hrgq-fjj8-13befa28","LiteLLM: Password hash exposure and pass-the-hash authentication bypass",[],[93],"2026-04-08T00:04:12Z","2026-04-17T01:29:14.845270912Z",[370],{"type":260,"score":371},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[373,375],{"type":264,"url":374},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-69x8-hrgq-fjj8",{"type":272,"url":161},[235,221,229,214],{"id":94,"slug":378,"dossier":45,"summary":379,"aliases":380,"sourceIds":382,"published":383,"modified":384,"checkedAt":7,"severity":385,"references":388,"versionKeys":401,"packageCount":32,"repositoryCount":34},"ghsa-72m8-9m7m-h278-09927b5d","LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks",[381,148],"CVE-2026-59821",[94,148],"2026-07-22T22:38:55Z","2026-07-23T15:11:26.912539142Z",[386],{"type":260,"score":387},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[389,391,393,395,396,398,399],{"type":264,"url":390},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",{"type":267,"url":392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59821",{"type":264,"url":394},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe50b4486d0f7aa0497185a1ebcdd2c91f1769eba",{"type":272,"url":161},{"type":264,"url":397},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.82.0-stable",{"type":272,"url":276},{"type":267,"url":400},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",[235,221,229,214],{"id":95,"slug":403,"dossier":45,"summary":404,"aliases":405,"sourceIds":407,"published":408,"modified":409,"checkedAt":7,"severity":410,"references":413,"versionKeys":427,"packageCount":32,"repositoryCount":34},"ghsa-7488-6r32-c95q-deb7c5f3","LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback",[406,149],"CVE-2026-59822",[95,149],"2026-07-22T22:38:33Z","2026-07-23T15:11:29.132983365Z",[411],{"type":260,"score":412},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[414,416,418,420,422,423,424,425],{"type":264,"url":415},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-7488-6r32-c95q",{"type":267,"url":417},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59822",{"type":264,"url":419},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F26463",{"type":264,"url":421},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F73869f0faf7d11ee21adcb5f91b8c33a340b6c2c",{"type":272,"url":161},{"type":264,"url":305},{"type":272,"url":276},{"type":267,"url":426},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7488-6r32-c95q",[235,221,229,214],{"id":96,"slug":429,"dossier":45,"summary":430,"aliases":431,"sourceIds":433,"published":434,"modified":435,"checkedAt":7,"severity":436,"references":439,"versionKeys":452,"packageCount":32,"repositoryCount":32},"ghsa-fh2c-86xm-pm2x-ff1ac9ef","LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request",[432,141],"CVE-2024-8984",[96,141],"2025-03-20T12:32:49Z","2026-07-07T17:56:56.562714379Z",[437],{"type":290,"score":438},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[440,442,444,445,447,449,450],{"type":267,"url":441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8984",{"type":264,"url":443},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61",{"type":272,"url":161},{"type":264,"url":446},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fblob\u002F8c5ff150f6142608ffe968e4e68429f978fda187\u002Flitellm\u002Ftests\u002Ftest_spend_logs.py#L242",{"type":264,"url":448},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F554fc76b-3097-4223-b4cf-110b853e9355",{"type":272,"url":276},{"type":267,"url":451},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh2c-86xm-pm2x",[235],{"id":97,"slug":454,"dossier":45,"summary":455,"aliases":456,"sourceIds":458,"published":459,"modified":460,"checkedAt":7,"severity":461,"references":464,"versionKeys":475,"packageCount":32,"repositoryCount":32},"ghsa-fjcf-3j3r-78rp-3506a50a","LiteLLM Has an Improper Authorization Vulnerability",[457,142],"CVE-2025-0628",[97,142],"2025-03-20T12:32:52Z","2026-07-07T17:56:36.033233141Z",[462],{"type":290,"score":463},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[465,467,469,470,472,473],{"type":267,"url":466},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-0628",{"type":264,"url":468},"https:\u002F\u002Fgithub.com\u002Fberriai\u002Flitellm\u002Fcommit\u002F566d9354aab4215091b2e51ad0333e948125fa1b",{"type":272,"url":161},{"type":264,"url":471},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6c0e2f75-2d03-42f9-9530-e16a973317fc",{"type":272,"url":276},{"type":267,"url":474},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjcf-3j3r-78rp",[235],{"id":98,"slug":477,"dossier":45,"summary":478,"aliases":479,"sourceIds":481,"published":482,"modified":483,"checkedAt":7,"severity":484,"references":487,"versionKeys":496,"packageCount":32,"repositoryCount":34},"ghsa-jjhc-v7c2-5hh6-5d2c89e6","LiteLLM: Authentication bypass via OIDC userinfo cache key collision",[480,151],"CVE-2026-35030",[98,151],"2026-04-03T21:59:50Z","2026-07-01T20:22:56.400828Z",[485],{"type":260,"score":486},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[488,490,492,493,494],{"type":264,"url":489},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",{"type":267,"url":491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35030",{"type":272,"url":161},{"type":272,"url":276},{"type":267,"url":495},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",[235,221,229,214],{"id":99,"slug":498,"dossier":45,"summary":499,"aliases":500,"sourceIds":502,"published":503,"modified":504,"checkedAt":7,"severity":505,"references":510,"versionKeys":533,"packageCount":32,"repositoryCount":34},"ghsa-qrc4-49gv-mv9m-c7358be2","LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit",[501,144],"CVE-2026-47101",[99,144],"2026-05-21T21:30:36Z","2026-07-13T16:42:56.741599701Z",[506,508],{"type":290,"score":507},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":260,"score":509},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[511,513,515,517,519,521,522,524,526,528,530,531],{"type":267,"url":512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47101",{"type":264,"url":514},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F2220f3076ac89bd2a2e3439acf57dcfbec2434c9",{"type":264,"url":516},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F5190bd07eb23a037745d86328096f54378f1614a",{"type":264,"url":518},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fd910a95661fce3cdd36f3b06c03ecf9c46c6457c",{"type":264,"url":520},"https:\u002F\u002Fgist.github.com\u002F13ph03nix\u002F9ec616e1fdc77b3673509c60206e827f",{"type":272,"url":161},{"type":264,"url":523},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.14-stable",{"type":264,"url":525},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8e75edfb-ff05-4e63-bfca-2d93d03fb3b9",{"type":264,"url":527},"https:\u002F\u002Fwww.obsidiansecurity.com\u002Fblog\u002Flitellm-privilege-escalation-rce",{"type":264,"url":529},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-api-key-generation",{"type":272,"url":276},{"type":267,"url":532},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qrc4-49gv-mv9m",[235,221,229,214],{"id":100,"slug":535,"dossier":45,"summary":536,"aliases":537,"sourceIds":539,"published":540,"modified":541,"checkedAt":7,"severity":542,"references":545,"versionKeys":564,"packageCount":32,"repositoryCount":34},"ghsa-wpfp-gwwc-vwq6-53d5ec36","LiteLLM allows a user to modify their own user_role via the \u002Fuser\u002Fupdate endpoint",[538,145],"CVE-2026-47102",[100,145],"2026-05-21T21:30:37Z","2026-07-13T16:43:25.135559552Z",[543,544],{"type":290,"score":507},{"type":260,"score":509},[546,548,550,552,554,555,556,557,558,559,561,562],{"type":267,"url":547},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47102",{"type":264,"url":549},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25541",{"type":264,"url":551},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F128d32d2494b759c5d15da3452452af4c6a34c01",{"type":264,"url":553},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe6f18ce75b111c9b93dc15c72894cbdeb53177ce",{"type":264,"url":520},{"type":272,"url":161},{"type":264,"url":274},{"type":264,"url":525},{"type":264,"url":527},{"type":264,"url":560},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-user-update",{"type":272,"url":276},{"type":267,"url":563},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wpfp-gwwc-vwq6",[235,221,229,214],1786591834993]