kiva-llm-gateway

Certifi removes GLOBALTRUST root certificate

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Starlette has possible denial-of-service vector when parsing large files in multipart forms

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)

AIOHTTP has CRLF injection through multipart part content type header construction

urllib3 streaming API improperly handles highly compressed data

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

urllib3 does not control redirects in browsers and Node.js

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

LiteLLM: Local file read via request-supplied OIDC file references

LiteLLM: MCP Proxy Has Improper Authentication

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

LiteLLM: Authentication Bypass via Host Header Injection

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

Vulnerable OpenSSL included in cryptography wheels

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

AIOHTTP vulnerable to brute-force leak of internal static file path components

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Denial of service (DoS) via deformation `multipart/form-data` boundary

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

AnyIO process-pool workers can block indefinitely on undrained stderr

python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

pyasn1 has a DoS vulnerability in decoder

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

AIOHTTP's unicode processing of header values could cause parsing discrepancies

LiteLLM: Password hash exposure and pass-the-hash authentication bypass

h2: Duplicate Host header could facilitate request smuggling

AIOHTTP vulnerable to denial of service through large payloads

python-multipart: Semicolon treated as querystring field separator enables parameter smuggling

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

LiteLLM: Admin Key Handler Has Improper Authorization

pytest has vulnerable tmpdir handling

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

PyJWT accepts unknown `crit` header extensions

Vulnerable OpenSSL included in cryptography wheels

Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

protobuf affected by a JSON recursion depth bypass

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing