PyPI/litellm CVE-2024-4888: medium 6.5, EPSS 0.62%
Arbitrary file deletion in litellm
Action: Upgrade litellm to 1.35.36 or later.
pip install litellm==1.35.36Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.35.36 | - |
Fixed versions
| 1.35.36 |
Sources
- osv: GHSA-3xr8-qfvj-9p9j
- https://nvd.nist.gov/vuln/detail/CVE-2024-4888
- https://github.com/BerriAI/litellm/pull/3193
- https://github.com/BerriAI/litellm
- https://huntr.com/bounties/48461d89-cf13-4ad3-a43e-0d37da08fc6c
CVE-2024-4888 · published · modified · JSON