From c0bea032c16a575b87ee120c878125a1e7b1f8db Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 28 Jun 2024 21:58:43 +0000
Subject: [PATCH] Publish GHSA-gppg-gqw8-wh9g

---
 .../2024/06/GHSA-gppg-gqw8-wh9g/GHSA-gppg-gqw8-wh9g.json      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2024/06/GHSA-gppg-gqw8-wh9g/GHSA-gppg-gqw8-wh9g.json b/advisories/github-reviewed/2024/06/GHSA-gppg-gqw8-wh9g/GHSA-gppg-gqw8-wh9g.json
index 4ef1ee74c55..1342b216e92 100644
--- a/advisories/github-reviewed/2024/06/GHSA-gppg-gqw8-wh9g/GHSA-gppg-gqw8-wh9g.json
+++ b/advisories/github-reviewed/2024/06/GHSA-gppg-gqw8-wh9g/GHSA-gppg-gqw8-wh9g.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gppg-gqw8-wh9g",
-  "modified": "2024-06-28T21:06:26Z",
+  "modified": "2024-06-28T21:57:33Z",
   "published": "2024-06-27T21:32:08Z",
   "aliases": [
     "CVE-2024-5751"
   ],
-  "summary": "litellm vulnerable to remote code exection base on using eval unsafely",
+  "summary": "litellm vulnerable to remote code execution based on using eval unsafely",
   "details": "BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment` function, which decodes and decrypts environment variables from base64 and assigns them to `os.environ`. An attacker can exploit this by sending a malicious payload to the `/config/update` endpoint, which is then processed and executed by the server when the `get_secret` function is triggered. This requires the server to use Google KMS and a database to store a model.",
   "severity": [
     {