CVE-2024-9606 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only…
High CVSS: 7.5

CVE-2024-9606

In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount of the secret key. The issue affects version v1.44.9.
Vendor
Litellm
Product
Litellm
CWE
CWE-117
Yayın Tarihi
2025-03-20 10:15:49
Güncelleme
2025-04-07 14:50:05
Source Identifier
security@huntr.dev
KEV Date Added
-

Kategoriler

Referanslar