Vendor
BerriAI
46 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Low 2.1
LiteLLM: Local file read via request-supplied OIDC file references
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable, LiteLLM's /health/test_connection endpoint resolved request-supplied environment and OIDC file references in litellm_params, allowing a proxy admini…
-
Low 2.1
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allow…