https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-12T05:52:00.731472+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/brew-aider-cve-2024-5225 BREW-aider-CVE-2024-5225 — SQL injection in litellm 2026-10-12T05:52:00.738409+00:00

Affected: Homebrew: aider

An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint. The vulnerability arises due to improper neutralization of special elements used in an SQL command. The affected code constructs an SQL query by concatenating an unvalidated `api_key` parameter directly into the query, making it susceptible to SQL Injection if the `api_key` contains malicious data. This issue affects the latest version of the repository. Successful exploitation of this vulnerability could lead to unauthorized access, data manipulation, exposure of confidential information, and denial of service (DoS).

 https://vulnerability.circl.lu/vuln/cnvd-2024-29650 cnvd-2024-29650 2026-10-12T05:52:00.738505+00:00 cnvd-2024-29650 https://vulnerability.circl.lu/vuln/fkie_cve-2024-5225 fkie_cve-2024-5225 2026-10-12T05:52:00.738539+00:00

An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint. The vulnerability arises due to improper neutralization of special elements used in an SQL command. The affected code constructs an SQL query by concatenating an unvalidated `api_key` parameter directly into the query, making it susceptible to SQL Injection if the `api_key` contains malicious data. This issue affects the latest version of the repository. Successful exploitation of this vulnerability could lead to unauthorized access, data manipulation, exposure of confidential information, and denial of service (DoS).

 https://vulnerability.circl.lu/vuln/ghsa-h6m6-jj8v-94jj GHSA-h6m6-jj8v-94jj — SQL injection in litellm 2026-10-12T05:52:00.738590+00:00

Affected: PyPI: litellm

An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint. The vulnerability arises due to improper neutralization of special elements used in an SQL command. The affected code constructs an SQL query by concatenating an unvalidated `api_key` parameter directly into the query, making it susceptible to SQL Injection if the `api_key` contains malicious data. This issue affects the latest version of the repository. Successful exploitation of this vulnerability could lead to unauthorized access, data manipulation, exposure of confidential information, and denial of service (DoS).

 https://vulnerability.circl.lu/vuln/pysec-2026-1550 PYSEC-2026-1550 — SQL injection in litellm 2026-10-12T05:52:00.738630+00:00

Affected: PyPI: litellm

An SQL Injection vulnerability exists in the berriai/litellm repository, specifically within the `/global/spend/logs` endpoint. The vulnerability arises due to improper neutralization of special elements used in an SQL command. The affected code constructs an SQL query by concatenating an unvalidated `api_key` parameter directly into the query, making it susceptible to SQL Injection if the `api_key` contains malicious data. This issue affects the latest version of the repository. Successful exploitation of this vulnerability could lead to unauthorized access, data manipulation, exposure of confidential information, and denial of service (DoS).