Skip to content
OpenAdvisories

Archive

21 June 2026

Vulnerabilities first published on this day (UTC), newest first.

45 results · Clear filters · Feed

  • Medium 6.3

    Montodel House-Rental-Management index.php houses sql injection

    A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be …

  • Medium 6.3

    BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery

    A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function _execute_with_mcp_client of the file litellm/proxy/_experimental/mcp_server/rest_endpoints.py of the component MCP Server Connection Tes…

  • Medium 6.3

    BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration

    A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the file litellm/proxy/auth/login_utils.py of the component PROXY_ADMIN database API Key Generator. Performing a manipulation results in sessio…

  • Medium 5.0

    BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

    A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/user_api_key_auth.py of the component M2M JWT Handler. Such manipulation leads to improper authorization. The attack can be launche…

  • Medium 5.4

    BerriAI litellm Admin Key key_management_endpoints.py improper authorization

    A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper author…