kiva-llm-gateway

Certifi removes GLOBALTRUST root certificate

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Starlette has possible denial-of-service vector when parsing large files in multipart forms

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding

AIOHTTP has CRLF injection through multipart part content type header construction

urllib3 streaming API improperly handles highly compressed data

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Black: Arbitrary file writes from unsanitized user input in cache file name

virtualenv: Xonsh activation literals depend on the script decoding codec

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device workflow

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

virtualenv: Deletion recovery can change a symlink target's mode

dnspython dns.name.from_wire_parser() excessive CPU use

urllib3 does not control redirects in browsers and Node.js

AIOHTTP: Secure attribute not enforced for shared cookie

virtualenv: Downloaded wheel selection and caching precede verification

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

LiteLLM: Local file read via request-supplied OIDC file references

LiteLLM: MCP Proxy Has Improper Authentication

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

LiteLLM: Authentication Bypass via Host Header Injection

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

Vulnerable OpenSSL included in cryptography wheels

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

AIOHTTP vulnerable to brute-force leak of internal static file path components

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

virtualenv: Generated files can follow existing destination links

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Denial of service (DoS) via deformation `multipart/form-data` boundary

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

AnyIO process-pool workers can block indefinitely on undrained stderr

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST

aiohttp server lacks an initial request/header timeout

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

pyasn1 has a DoS vulnerability in decoder

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

AIOHTTP's unicode processing of header values could cause parsing discrepancies

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path