https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:11:01 +0000 https://db.gcve.eu/vuln/cve-2024-4890 <p><strong>Affected:</strong> berriai/litellm, berriai litellm</p> <p>A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the &#39;/team/update&#39; process. The vulnerability arises due to the improper handling of the &#39;user_id&#39; parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability by injecting malicious SQL commands through the &#39;user_id&#39; parameter, leading to potential unauthorized access to sensitive information such as API keys, user information, and tokens stored in the database. The affected version is 1.27.14.</p> <p><strong>Affected:</strong> berriai/litellm, berriai litellm</p> <p>A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the &#39;/team/update&#39; process. The vulnerability arises due to the improper handling of the &#39;user_id&#39; parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability by injecting malicious SQL commands through the &#39;user_id&#39; parameter, leading to potential unauthorized access to sensitive information such as API keys, user information, and tokens stored in the database. The affected version is 1.27.14.</p> https://db.gcve.eu/vuln/cve-2024-4890 https://db.gcve.eu/vuln/ghsa-8j42-pcfm-3467 <p><strong>Affected:</strong> PyPI: litellm</p> <p>A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the &#39;/team/update&#39; process. The vulnerability arises due to the improper handling of the &#39;user_id&#39; parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability by injecting malicious SQL commands through the &#39;user_id&#39; parameter, leading to potential unauthorized access to sensitive information such as API keys, user information, and tokens stored in the database. The affected version is 1.27.14.</p> <p><strong>Affected:</strong> PyPI: litellm</p> <p>A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the &#39;/team/update&#39; process. The vulnerability arises due to the improper handling of the &#39;user_id&#39; parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability by injecting malicious SQL commands through the &#39;user_id&#39; parameter, leading to potential unauthorized access to sensitive information such as API keys, user information, and tokens stored in the database. The affected version is 1.27.14.</p> https://db.gcve.eu/vuln/ghsa-8j42-pcfm-3467 https://db.gcve.eu/vuln/pysec-2026-1544 <p><strong>Affected:</strong> PyPI: litellm</p> <p>A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the &#39;/team/update&#39; process. The vulnerability arises due to the improper handling of the &#39;user_id&#39; parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability by injecting malicious SQL commands through the &#39;user_id&#39; parameter, leading to potential unauthorized access to sensitive information such as API keys, user information, and tokens stored in the database. The affected version is 1.27.14.</p> <p><strong>Affected:</strong> PyPI: litellm</p> <p>A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the &#39;/team/update&#39; process. The vulnerability arises due to the improper handling of the &#39;user_id&#39; parameter in the raw SQL query used for deleting users. An attacker can exploit this vulnerability by injecting malicious SQL commands through the &#39;user_id&#39; parameter, leading to potential unauthorized access to sensitive information such as API keys, user information, and tokens stored in the database. The affected version is 1.27.14.</p> https://db.gcve.eu/vuln/pysec-2026-1544