{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.27.14"}],"component":"litellm","cve_ids":["CVE-2024-4890"],"ecosystem":"PyPI","epss":0.0056,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8j42-pcfm-3467","id":"tcs_01M5KF8DK5CPGF9B1K63B49KE9","modified_at":"2026-09-10T03:50:15.174348208Z","published_at":"2024-06-06T21:30:37Z","references":["https://osv.dev/vulnerability/GHSA-8j42-pcfm-3467","https://nvd.nist.gov/vuln/detail/CVE-2024-4890","https://github.com/BerriAI/litellm/pull/2954","https://github.com/BerriAI/litellm","https://huntr.com/bounties/a4f6d357-5b44-4e00-9cac-f1cc351211d2"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-8j42-pcfm-3467","url":"https://osv.dev/vulnerability/GHSA-8j42-pcfm-3467"}],"summary":"SQL injection in litellm"}