PyPI/semantic-router: critical
semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin
Action: Upgrade semantic-router to 0.1.15 or later.
pip install semantic-router==0.1.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.8 | 0.1.15 | - |
Fixed versions
| 0.1.15 |
Sources
- osv: GHSA-98x5-vq43-vc5p
- https://github.com/aurelio-labs/semantic-router/security/advisories/GHSA-98x5-vq43-vc5p
- https://github.com/aurelio-labs/semantic-router
published · modified · JSON