Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-45809
5.4
MEDIUMCVSS v3
Published
July 3, 2025
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.
BerriAI/litellm
GitHubThe fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]
GitHubThe fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]= 1.65.4NVD
NPM
RubyGems