{"id":"CVE-2024-10188","aliases":["GHSA-gw2q-qw9j-rgv7","PYSEC-2026-1549"],"title":"LiteLLM Vulnerable to Denial of Service (DoS)","summary":"LiteLLM Vulnerable to Denial of Service (DoS)","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"litellm","product":"litellm","ecosystem":"pip","affected":["litellm < 1.53.1.dev1"],"patched":["litellm 1.53.1.dev1"],"published":"2025-03-20","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:49:48.460295687Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-gw2q-qw9j-rgv7","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10188"},{"url":"https://github.com/berriai/litellm/commit/21156ff5d0d84a7dd93f951ca033275c77e4f73c"},{"url":"https://github.com/BerriAI/litellm"},{"url":"https://huntr.com/bounties/96a32812-213c-4819-ba4e-36143d35e95b"}],"tags":["osv","pip"],"epss":0.00558,"epssPercentile":0.45065,"ingestedAt":"2026-07-08T18:25:49.949Z","slug":"CVE-2024-10188","body":"## Overview\n\nA vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.\n\n## Affected packages\n\n- `litellm < 1.53.1.dev1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `litellm 1.53.1.dev1`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}