| Package | Affected versions | Patched versions |
|---|---|---|
| litellm | < 1.34.42 | 1.34.42 |
| litellm | < 1.34.42 | 1.34.42 |
BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the /completions endpoint. The vulnerability arises from the hf_chat_template method processing the chat_template parameter from the tokenizer_config.json file through the Jinja template engine without proper sanitization. Attackers can exploit this by crafting malicious tokenizer_config.json files that execute arbitrary code on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free