https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T16:18:24.678513+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-37004 CVE-2026-37004 2026-10-06T16:18:24.697741+00:00

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

 https://vulnerability.circl.lu/vuln/ghsa-6wvf-77m9-58rm GHSA-6wvf-77m9-58rm — LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint 2026-10-06T16:18:24.697842+00:00

Affected: PyPI: litellm

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

 https://vulnerability.circl.lu/vuln/pysec-2026-3861 PYSEC-2026-3861 — LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint 2026-10-06T16:18:24.697913+00:00

Affected: PyPI: litellm

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.