GHSA-98x5-vq43-vc5p

Critical

Advisory

Published 26 Jun 2026In the index since 8 Sept 2026

semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
semantic-routerpypi	0.1.11	0.1.15	2

2 by stars

Chart

Latest

Affected images

Radar Score

litellmlitellm-helm

1 of the 1 container images this version deploys carry GHSA-98x5-vq43-vc5p.

Container image	Digest	Package	Fixed in
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	semantic-router@0.1.11	0.1.15

4,292

1 of the 4 container images this version deploys carry GHSA-98x5-vq43-vc5p.

Container image	Digest	Package	Fixed in
litellm/litellm-non_root :v1.82.3-stable	09b217802ded	semantic-router@0.1.11	0.1.15

5,201

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
litellm/litellm-non_root :v1.82.3-stable	09b217802ded	semantic-router@0.1.11	0.1.15	1
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	semantic-router@0.1.11	0.1.15	1