Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-49468
9.8
CRITICALCVSS v3
Published
June 22, 2026
Affected
4 projects
Assigned by
GitHub
Severity scale
010
Description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, This vulnerability is fixed in 1.84.0.
BerriAI/litellm
GitHubThe fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]
GitHubThe fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]< 1.84.0NVD
NPM
RubyGems