https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:40:40.496073+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-aider-cve-2024-6587 BREW-aider-CVE-2024-6587 — LiteLLM Server-Side Request Forgery (SSRF) vulnerability 2026-10-03T17:40:40.610794+00:00

Affected: Homebrew: aider

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.

 https://cve.radiocsirt.org/vuln/euvd-2026-163222 EUVD-2026-163222 2026-10-03T17:40:40.610861+00:00 EUVD-2026-163222 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6587 fkie_cve-2024-6587 2026-10-03T17:40:40.610879+00:00

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.

 https://cve.radiocsirt.org/vuln/ghsa-g26j-5385-hhw3 GHSA-g26j-5385-hhw3 — LiteLLM Server-Side Request Forgery (SSRF) vulnerability 2026-10-03T17:40:40.610904+00:00

Affected: PyPI: litellm

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.

 https://cve.radiocsirt.org/vuln/pysec-2026-1547 PYSEC-2026-1547 — LiteLLM Server-Side Request Forgery (SSRF) vulnerability 2026-10-03T17:40:40.610927+00:00

Affected: PyPI: litellm

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.