CVE-2026-27941
1 advisory.
PyPI/openlit CVE-2026-27941: critical 9.9, EPSS 0.58%
OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out a
Action: Upgrade openlit to 1.37.1 or later.
pip install openlit==1.37.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.36.2 | 1.37.1 | - |
Fixed versions
| 1.37.1 |
Sources
- osv: PYSEC-2026-2246
- https://github.com/openlit/openlit/commit/4a62039a1659d6cbb8913172693f587b5fc2546c
- https://github.com/openlit/openlit/security/advisories/GHSA-9jgv-x8cq-296q
CVE-2026-27941 · published · modified · JSON