LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May.The cloud and AI model secret-stealing part of the incident began when someone uploaded a poisoned version (1.107.0) of the popular open source AI gateway to PyPI and its container registries last Wednesday. This... Weiterlesen: LiteLLM supply chain attack started with an exposed master key
Intelligence View
⚡ tsecurity.de Intelligence
LiteLLM supply chain attack started with an exposed master key
LiteLLM has traced last week’s supply chain attack to a master key it accidentally committed to a public GitHub repository in May.The cloud and AI model s…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
15 Quellen
Security: Cross-Site Scripting in python-nh3 (Fedora)
14 weitere Quellen
PPro-Linuxvor 13 Std.Security: Cross-Site Scripting in rust-ammonia (Fedora) VVulDB Updatesvor 4 Std.CVE-2026-56354 | n8n prior 1.123.24/2.10.4/2.12.0 Form Node cross site scripting PPro-Linux Securityvor 13 Std.Cross-Site Scripting in rust-ammonia (Fedora) PPro-Linux Securityvor 13 Std.Cross-Site Scripting in python-nh3 (Fedora) VVulDB Updatesvor 6 Std.CVE-2024-13362 | WP Coupons and Deals Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 6 Std.CVE-2024-13362 | AidWP Plugin on WordPress Parameter url cross site scripting
+8
12 Quellen
CVE-2026-99167 | Linux Kernel up to 6.18.58/7.2.12 Traffic Control Action __tcf_action_put use after free (EUVD-2026-111919)
11 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-99164 | Linux Kernel up to 7.2.12 SPI Driver dma_len use after free (EUVD-2026-111916) GGoogle Alertvor 3 Std.Kritische Linux-Kernel-Sicherheitslücke CVE-2026-98432 ermöglicht die Ausführung von ... VVulDB Updatesvor 3 Std.CVE-2026-99216 | Linux Kernel up to 6.18.58/7.2.12 VMBus vmbus_initiate_unload state issue (EUVD-2026-111968) VVulDB Updatesvor 3 Std.CVE-2026-99213 | Linux Kernel up to 6.18.58/7.2.12 vsock vsock_insert_connected.cold connect memory corruption (EUVD-2026-111965) VVulDB Updatesvor 3 Std.CVE-2026-99212 | Linux Kernel up to 6.18.58/7.2.12 RDS net/rds rds_rdma_cm_event_handler_cmn i_cm_id race condition (EUVD-2026-111964) VVulDB Updatesvor 3 Std.CVE-2026-99203 | Linux Kernel up to 6.18.58/7.2.12 Pipe pipe_fasync use after free (EUVD-2026-111955)
+5
11 Quellen
Security: Mehrere Probleme in keepassxc (Fedora)
10 weitere Quellen
PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter60 (Fedora) PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-trustfall-rustdoc-adapter57 (Fedora) PPro-Linuxvor 13 Std.Security: Mehrere Probleme in rust-cargo-semver-checks (Fedora) PPro-Linux Securityvor 13 Std.Mehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linux Securityvor 13 Std.Mehrere Probleme in rustup (Fedora)
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4298523/it-nachrichten/litellm-supply-chain-attack-started-with-an-exposed-master-key/