PyPI/litellm CVE-2024-8984: high 7.5, EPSS 0.86%
LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Action: Upgrade litellm to 1.56.2 or later.
pip install litellm==1.56.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.56.2 | - |
Fixed versions
| 1.56.2 |
Sources
- osv: GHSA-fh2c-86xm-pm2x
- https://nvd.nist.gov/vuln/detail/CVE-2024-8984
- https://github.com/BerriAI/litellm/commit/4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61
- https://github.com/BerriAI/litellm
- https://github.com/BerriAI/litellm/blob/8c5ff150f6142608ffe968e4e68429f978fda187/litellm/tests/test_spend_logs.py#L242
- https://huntr.com/bounties/554fc76b-3097-4223-b4cf-110b853e9355
CVE-2024-8984 · published · modified · JSON