Executive brief
LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Affected products
- PyPI litellm
Junglewise Threat Intelligence
CVE-2024-8984: PYSEC-2026-1545 - LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
CVE-2024-8984 · Severity: low · CVSS 3 · Published 2026-07-07
Technologies: litellm (PyPI). Vendors: PyPI.
Related threats
- BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute ar
- BerriAI LiteLLM authentication bypass in MCP endpoint
- BerriAI LiteLLM code injection in Custom Code Guardrails
- BerriAI LiteLLM path traversal in Skills archive extraction
- BerriAI LiteLLM local file read in health test_connection endpoint