Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1Authorization Bypass Through User-Controlled KeyEPSS 0.2%Oct 11, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityKEVEPSS 0.8%Jul 8, 2026
- High8.7LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint.May 21, 2026
- High8.7LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit.May 21, 2026
- High8.6LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.May 8, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityKEVEPSS 5.8%May 7, 2026
- High8.8LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.Apr 10, 2026
- Critical9.4LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Apr 6, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Apr 6, 2026
- High7.7PraisonAI is a multi-agent teams system.Apr 3, 2026
- Low1.9A vulnerability has been found in wandb OpenUI up to 0.0.0.0/1.0.Mar 28, 2026
- Critical9.4Aquasecurity Trivy Embedded Malicious Code VulnerabilityKEVEPSS 1.7%Mar 23, 2026
- HighInsufficient Verification of Data AuthenticityUnknown date
14 records · page 1 of 1
PreviousNext