{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.52.1"}],"component":"litellm","cve_ids":["CVE-2025-0330"],"ecosystem":"PyPI","epss":0.00566,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-879v-fggm-vxw2","id":"tcs_01M5KGT7GM3YGJNMX2Q7QNY4R8","modified_at":"2026-07-07T17:46:52.775649455Z","published_at":"2026-07-07T14:34:58.666687Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1543","https://nvd.nist.gov/vuln/detail/CVE-2025-0330","https://github.com/BerriAI/litellm","https://huntr.com/bounties/661b388a-44d8-4ad5-862b-4dc5b80be30a","https://pypi.org/project/litellm","https://github.com/advisories/GHSA-879v-fggm-vxw2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-1543","url":"https://osv.dev/vulnerability/PYSEC-2026-1543"}],"summary":"LiteLLM Has a Leakage of Langfuse API Keys"}