Количество 2
Количество 2
CVE-2024-9606
In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount of the secret key. The issue affects version v1.44.9.
GHSA-g5pg-73fc-hjwq
LiteLLM Reveals Portion of API Key via a Logging File
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-9606 In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount of the secret key. The issue affects version v1.44.9. | CVSS3: 7.5 | 0% Низкий | 11 месяцев назад |
| GHSA-g5pg-73fc-hjwq LiteLLM Reveals Portion of API Key via a Logging File | CVSS3: 7.5 | 0% Низкий | 11 месяцев назад |
Уязвимостей на страницу