{"id":"CVE-2024-10188","published":"2025-03-20T10:10:48Z","modified":"2025-03-20T18:16:28Z","title":"Denial of Service in BerriAI/litellm","vendor":"berriai","product":"berriai/litellm","tier":"tail","description":{"text":"A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00569,"percentile":0.47124,"provenance":"source"},"cwes":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption"}],"references":[{"url":"https://huntr.com/bounties/96a32812-213c-4819-ba4e-36143d35e95b","tags":[]},{"url":"https://github.com/berriai/litellm/commit/21156ff5d0d84a7dd93f951ca033275c77e4f73c","tags":[]}],"priority":{"score":14.7,"factors":[{"name":"EPSS percentile","points":9.42},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"berriai","affectedVersions":[{"vendor":"berriai","product":"berriai/litellm","versions":[">= unspecified, < 1.53.1"]}],"affected":[{"ecosystem":"PyPI","package":"litellm","vulnerableRanges":["<1.53.1.dev1"],"patched":["1.53.1.dev1"],"from":["GHSA-gw2q-qw9j-rgv7","PYSEC-2026-1549"],"provenance":"source"}],"euvd":{"id":"EUVD-2025-7124","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-berriai-litellm-cve-2024-5710","parents":[{"from":"CVE-2024-5710","to":"CVE-2024-10188","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["litellm/proxy/auth/user_api_key_auth.py","litellm/proxy/proxy_server.py"],"commits":["https://github.com/berriai/litellm/commit/21156ff5d0d84a7dd93f951ca033275c77e4f73c","https://github.com/BerriAI/litellm/commit/da3ae00bd68f451ed8ddf0bc0a9fd34bde5554d6"],"basis":"shared function","functions":["generate_feedback_box"]}]}],"children":[{"from":"CVE-2024-10188","to":"CVE-2026-59821","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["litellm/proxy/auth/user_api_key_auth.py","litellm/proxy/proxy_server.py"],"commits":["https://github.com/berriai/litellm/commit/21156ff5d0d84a7dd93f951ca033275c77e4f73c","https://github.com/BerriAI/litellm/commit/e50b4486d0f7aa0497185a1ebcdd2c91f1769eba"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2024-5751","published":"2024-06-27","fixed":"1.40.16","kev":false},{"cve":"CVE-2024-6587","published":"2024-09-13","fixed":"1.44.8","kev":false},{"cve":"CVE-2024-9606","published":"2025-03-20","fixed":"1.44.12","kev":false,"link":{"from":"CVE-2024-9606","to":"CVE-2024-10188","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:litellm","fromFixed":"1.44.12","toFixed":"1.53.1.dev1","daysApart":0}]}},{"cve":"CVE-2024-10188","published":"2025-03-20","fixed":"1.53.1.dev1","kev":false},{"cve":"CVE-2024-8984","published":"2025-03-20","fixed":"1.56.2","kev":false,"link":{"from":"CVE-2024-10188","to":"CVE-2024-8984","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:litellm","fromFixed":"1.53.1.dev1","toFixed":"1.56.2","daysApart":0}]}},{"cve":"CVE-2025-0628","published":"2025-03-20","fixed":"1.61.15","kev":false},{"cve":"CVE-2026-59821","published":"2026-07-08","fixed":"1.82.0","kev":false}],"package":"PyPI:litellm"}}