Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 84 available sources using the dropdown above.
OSV Homebrew πΊ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| brew-rawdog-cve-2026-12797 | BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints | 2026-09-15T10:30:07Z | 2026-09-15T10:30:07Z |
| brew-rawdog-cve-2026-12796 | BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens | 2026-09-15T10:30:07Z | 2026-09-15T10:30:07Z |
| brew-rawdog-cve-2026-12799 | BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure | 2026-09-15T10:30:06Z | 2026-09-15T10:30:06Z |
| brew-rawdog-cve-2026-12798 | BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader | 2026-09-15T10:30:06Z | 2026-09-15T10:30:06Z |
| brew-aider-cve-2026-12799 | BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure | 2026-09-15T08:43:30Z | 2026-09-15T08:43:30Z |
| brew-aider-cve-2026-12797 | BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints | 2026-09-15T08:43:30Z | 2026-09-15T08:43:30Z |
| brew-aider-cve-2026-12796 | BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens | 2026-09-15T08:43:30Z | 2026-09-15T08:43:30Z |
| brew-aider-cve-2026-12798 | BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader | 2026-09-15T08:43:29Z | 2026-09-15T08:43:29Z |
| brew-rawdog-cve-2026-12795 | LiteLLM: SSO Debug Flow Has Improper Authentication | 2026-09-11T17:01:58Z | 2026-09-11T17:01:58Z |
| brew-rawdog-cve-2026-12770 | LiteLLM: Admin Key Handler Has Improper Authorization | 2026-09-11T17:01:58Z | 2026-09-11T17:01:58Z |
| brew-rawdog-cve-2026-12773 | LiteLLM: MCP Proxy Has Improper Authentication | 2026-09-11T17:01:57Z | 2026-09-11T17:01:57Z |
| brew-aider-cve-2026-12795 | LiteLLM: SSO Debug Flow Has Improper Authentication | 2026-09-11T15:21:01Z | 2026-09-11T15:21:01Z |
| brew-aider-cve-2026-12773 | LiteLLM: MCP Proxy Has Improper Authentication | 2026-09-11T15:21:01Z | 2026-09-11T15:21:01Z |
| brew-aider-cve-2026-12772 | LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration | 2026-09-11T15:21:01Z | 2026-09-11T15:21:01Z |
| brew-aider-cve-2026-12771 | LiteLLM: M2M JWT Handler Has Improper Authorization | 2026-09-11T15:21:01Z | 2026-09-11T15:21:01Z |
| brew-aider-cve-2026-12770 | LiteLLM: Admin Key Handler Has Improper Authorization | 2026-09-11T15:21:01Z | 2026-09-11T15:21:01Z |
| brew-yewtube-cve-2026-84380 | HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated | 2026-09-10T21:31:39Z | 2026-09-10T21:31:39Z |
| brew-yewtube-cve-2026-84379 | HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers | 2026-09-10T21:31:39Z | 2026-09-10T21:31:39Z |
| brew-yewtube-cve-2026-84382 | HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification) | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| brew-yewtube-cve-2026-84381 | HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| brew-yewtube-cve-2026-84378 | HTTPX2: Quadratic SSE line buffering can cause CPU denial of service | 2026-09-10T21:31:38Z | 2026-09-10T21:31:38Z |
| brew-tartufo-cve-2026-78679 | GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251) | 2026-09-10T21:09:42Z | 2026-09-10T21:09:42Z |
| brew-strands-agents-sops-cve-2026-84382 | HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification) | 2026-09-10T21:05:20Z | 2026-09-10T21:05:20Z |
| brew-strands-agents-sops-cve-2026-84380 | HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated | 2026-09-10T21:05:20Z | 2026-09-10T21:05:20Z |
| brew-strands-agents-sops-cve-2026-84379 | HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers | 2026-09-10T21:05:20Z | 2026-09-10T21:05:20Z |
| brew-strands-agents-sops-cve-2026-84378 | HTTPX2: Quadratic SSE line buffering can cause CPU denial of service | 2026-09-10T21:05:20Z | 2026-09-10T21:05:20Z |
| brew-strands-agents-sops-cve-2026-84381 | HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies | 2026-09-10T21:05:19Z | 2026-09-10T21:05:19Z |
| brew-snowflake-cli-cve-2026-78679 | GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251) | 2026-09-10T20:56:29Z | 2026-09-10T20:56:29Z |
| brew-safety-cve-2026-12372 | 2026-09-10T20:49:20Z | 2026-09-10T20:49:20Z | |
| brew-safety-cve-2026-12261 | 2026-09-10T20:49:20Z | 2026-09-10T20:49:20Z |