Malicious versions reported for this package
- MAL-2026-2144 — 1.82.7, 1.82.8, 1.107.0 · Mar 24, 2026
1 result · Clear filters · Feed
-
Critical 9.3
LiteLLM: SQL injection in Proxy API key verification
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing i…
KEV May 8, 2026