{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.27.14"}],"component":"litellm","cve_ids":["CVE-2024-4890"],"ecosystem":"PyPI","epss":0.0056,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8j42-pcfm-3467","id":"tcs_01M5KGT7PDCN72SY98Z3HY3M0H","modified_at":"2026-07-07T17:46:52.764073225Z","published_at":"2026-07-07T14:34:34.255023Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1544","https://nvd.nist.gov/vuln/detail/CVE-2024-4890","https://github.com/BerriAI/litellm/pull/2954","https://github.com/BerriAI/litellm","https://huntr.com/bounties/a4f6d357-5b44-4e00-9cac-f1cc351211d2","https://pypi.org/project/litellm","https://github.com/advisories/GHSA-8j42-pcfm-3467"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"PYSEC-2026-1544","url":"https://osv.dev/vulnerability/PYSEC-2026-1544"}],"summary":"SQL injection in litellm"}