Issue Station
Sign In
Tools hereToolbox

litellm - 💡(How to fix) Fix [Bug]: CVE in aiohttp version 3.13.3 used in 1.83.8 and above (older litellm version which uses aiohttp==3.13.5 has fixes) [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
BerriAI/litellm#26190•Fetched 2026-04-22 07:45:52
View on GitHub
Comments
0
Participants
1
Timeline
3
Reactions
0
Author
bhadrimbhadrim
Participants
bhadrimbhadrim
Timeline (top)
labeled ×2renamed ×1

Code Example

Logs from litellm==1.83.7 install


Collecting litellm==1.83.7
  Downloading litellm-1.83.7-py3-none-any.whl.metadata (31 kB)
Collecting aiohttp==3.13.5 (from litellm==1.83.7)
  Downloading aiohttp-3.13.5-cp313-cp313-macosx_11_0_arm64.whl.metadata (8.1 kB)


Logs from litellm==1.83.8 install


Collecting aiohttp==3.13.3 (from litellm==1.83.8)
  Downloading aiohttp-3.13.3-cp313-cp313-macosx_11_0_arm64.whl.metadata (8.1 kB)


CVEs on 3.13.3
	Vulnerability found: GHSA-w2fm-2cpv-w7v5 - CLAIR-PYPI-AIOHTTP-2674953600
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-22815
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage
		Remediation: 3.13.4
		Updated at: 2026-04-01T19:45:17Z
		Codes: [CVE-2026-22815]
	Vulnerability found: GHSA-p998-jp59-783m - CLAIR-PYPI-AIOHTTP-2674949296
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34515
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:26:36Z
		Codes: [CVE-2026-34515]
	Vulnerability found: GHSA-m5qp-6w8w-w647 - CLAIR-PYPI-AIOHTTP-2674948594
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34516
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: high
		Description: AIOHTTP has a Multipart Header Size Bypass
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:43:07Z
		Codes: [CVE-2026-34516]
	Vulnerability found: GHSA-hcc4-c3v8-rx92 - CLAIR-PYPI-AIOHTTP-2674947709
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34513
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:19:22Z
		Codes: [CVE-2026-34513]
	Vulnerability found: GHSA-63hf-3vf5-4wqf - CLAIR-PYPI-AIOHTTP-2674941894
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34520
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: critical
		Description: AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:49:06Z
		Codes: [CVE-2026-34520]
	Vulnerability found: GHSA-2vrm-gr82-f7m5 - CLAIR-PYPI-AIOHTTP-2674937835
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34514
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP has CRLF injection through multipart part content type header construction
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:20:06Z
		Codes: [CVE-2026-34514]
	Vulnerability found: GHSA-mwh4-6h8g-pg8w - CLAIR-PYPI-AIOHTTP-2642441564
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34519
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP has HTTP response splitting via \r in reason phrase
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:48:24Z
		Codes: [CVE-2026-34519]
	Vulnerability found: GHSA-c427-h43c-vf67 - CLAIR-PYPI-AIOHTTP-2642435221
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34525
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP accepts duplicate Host headers
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:49:45Z
		Codes: [CVE-2026-34525]
	Vulnerability found: GHSA-966j-vmvw-g2g9 - CLAIR-PYPI-AIOHTTP-2642434714
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34518
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:47:46Z
		Codes: [CVE-2026-34518]
	Vulnerability found: GHSA-3wq7-rqq7-wx6j - CLAIR-PYPI-AIOHTTP-2642428077
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34517
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:47:07Z
		Codes: [CVE-2026-34517]
RAW_BUFFERClick to expand / collapse

Check for existing issues

  • I have searched the existing issues and checked that my issue is not a duplicate.

What happened?

We observed that version 1.83.8 and above is using aiohttp==3.13.3 while older version (1.83.7) uses aiohttp==3.13.5.

There are 10 CVEs that are fixed in aiohttp==3.13.5. Is this change to use the older version intentional? Are there plans to use latest version of aiohttp to avoid CVEs. If it is not can you please upgrade the version to 3.13.4 or above. Thank you.

Steps to Reproduce

  1. Install latest litellm.
  2. Scan for CVEs on the dependency chain. There will be 10 CVEs on aiohttp.
  3. Install version 1.83.7.
  4. Scan for CVEs on the dependency chain. There will be 0 CVEs on aiohttp.

Relevant log output

Logs from litellm==1.83.7 install


Collecting litellm==1.83.7
  Downloading litellm-1.83.7-py3-none-any.whl.metadata (31 kB)
Collecting aiohttp==3.13.5 (from litellm==1.83.7)
  Downloading aiohttp-3.13.5-cp313-cp313-macosx_11_0_arm64.whl.metadata (8.1 kB)


Logs from litellm==1.83.8 install


Collecting aiohttp==3.13.3 (from litellm==1.83.8)
  Downloading aiohttp-3.13.3-cp313-cp313-macosx_11_0_arm64.whl.metadata (8.1 kB)


CVEs on 3.13.3
	Vulnerability found: GHSA-w2fm-2cpv-w7v5 - CLAIR-PYPI-AIOHTTP-2674953600
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-22815
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage
		Remediation: 3.13.4
		Updated at: 2026-04-01T19:45:17Z
		Codes: [CVE-2026-22815]
	Vulnerability found: GHSA-p998-jp59-783m - CLAIR-PYPI-AIOHTTP-2674949296
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34515
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:26:36Z
		Codes: [CVE-2026-34515]
	Vulnerability found: GHSA-m5qp-6w8w-w647 - CLAIR-PYPI-AIOHTTP-2674948594
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34516
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: high
		Description: AIOHTTP has a Multipart Header Size Bypass
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:43:07Z
		Codes: [CVE-2026-34516]
	Vulnerability found: GHSA-hcc4-c3v8-rx92 - CLAIR-PYPI-AIOHTTP-2674947709
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34513
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:19:22Z
		Codes: [CVE-2026-34513]
	Vulnerability found: GHSA-63hf-3vf5-4wqf - CLAIR-PYPI-AIOHTTP-2674941894
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34520
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: critical
		Description: AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:49:06Z
		Codes: [CVE-2026-34520]
	Vulnerability found: GHSA-2vrm-gr82-f7m5 - CLAIR-PYPI-AIOHTTP-2674937835
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34514
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP has CRLF injection through multipart part content type header construction
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:20:06Z
		Codes: [CVE-2026-34514]
	Vulnerability found: GHSA-mwh4-6h8g-pg8w - CLAIR-PYPI-AIOHTTP-2642441564
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34519
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP has HTTP response splitting via \r in reason phrase
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:48:24Z
		Codes: [CVE-2026-34519]
	Vulnerability found: GHSA-c427-h43c-vf67 - CLAIR-PYPI-AIOHTTP-2642435221
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34525
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP accepts duplicate Host headers
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:49:45Z
		Codes: [CVE-2026-34525]
	Vulnerability found: GHSA-966j-vmvw-g2g9 - CLAIR-PYPI-AIOHTTP-2642434714
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34518
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:47:46Z
		Codes: [CVE-2026-34518]
	Vulnerability found: GHSA-3wq7-rqq7-wx6j - CLAIR-PYPI-AIOHTTP-2642428077
		URL: https://nvd.nist.gov/vuln/detail/CVE-2026-34517
		Package: aiohttp
		Version: 3.13.3
		Introduced By: aiohttp:3.13.3, litellm:1.83.10 --> aiohttp:3.13.3
		Severity: unknown
		Description: AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS
		Remediation: 3.13.4
		Updated at: 2026-04-01T21:47:07Z
		Codes: [CVE-2026-34517]

What part of LiteLLM is this about?

SDK (litellm Python package)

What LiteLLM version are you on ?

1.83.8 and above

Twitter / LinkedIn details

No response

extent analysis

TL;DR

Upgrade the aiohttp version to 3.13.4 or above to fix the CVEs introduced in version 3.13.3.

Guidance

  • The issue is caused by the downgrade of aiohttp from version 3.13.5 to 3.13.3 in LiteLLM version 1.83.8 and above, which introduces 10 CVEs.
  • To verify the issue, scan the dependency chain for CVEs after installing LiteLLM version 1.83.8 or above.
  • Upgrade the aiohttp version to 3.13.4 or above to fix the CVEs, as recommended by the remediation steps provided in the log output.
  • Consider installing an older version of LiteLLM (e.g., 1.83.7) that uses aiohttp version 3.13.5 as a temporary workaround.

Example

No code snippet is provided as the issue is related to dependency versioning.

Notes

The exact steps to upgrade the aiohttp version may vary depending on the project's dependency management system and configuration.

Recommendation

Apply workaround: Upgrade the aiohttp version to 3.13.4 or above to fix the CVEs, as this is the recommended remediation step provided in the log output.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…
#ssr#response parsing#generation error#database connection#vector store

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

litellm - 💡(How to fix) Fix [Bug]: CVE in aiohttp version 3.13.3 used in 1.83.8 and above (older litellm version which uses aiohttp==3.13.5 has fixes) [1 participants]