berriai/litellm Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in berriai/litellm version v1.44.5. This issue can be exploited by appending characters, such as dashes, to the end of a multipart boundary in an HTTP request. The server processes each character individually, leading to excessive resource consumption and causing the service to become unavailable. This vulnerability is unauthenticated, does not require user interaction, and affects all users of the service.

Impact

Exploitation of this vulnerability leads to excessive resource consumption, causing the service to become unavailable.