Skip to content
OpenAdvisories

Weakness (CWE)

CWE-222: Truncation of Security-relevant Information

Base Draft

The product truncates the display, recording, or processing of security-relevant information in a way that can obscure the source or nature of an attack.

Source: MITRE CWE-222

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.4
    CVE-2026-35030 Public exploit

    LiteLLM has an authentication bypass via OIDC userinfo cache key collision

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key. JWT headers produced by the same signi…

    BerriAI litellm litellm PyPI