{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.52.1"}],"component":"litellm","cve_ids":["CVE-2025-0330"],"ecosystem":"PyPI","epss":0.00566,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-879v-fggm-vxw2","id":"tcs_01M5KF7HDWBAA5RJXFE7PNQT18","modified_at":"2026-09-10T03:50:23.214350081Z","published_at":"2025-03-20T12:32:52Z","references":["https://osv.dev/vulnerability/GHSA-879v-fggm-vxw2","https://nvd.nist.gov/vuln/detail/CVE-2025-0330","https://github.com/BerriAI/litellm","https://huntr.com/bounties/661b388a-44d8-4ad5-862b-4dc5b80be30a"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-879v-fggm-vxw2","url":"https://osv.dev/vulnerability/GHSA-879v-fggm-vxw2"}],"summary":"LiteLLM Has a Leakage of Langfuse API Keys"}