scriptoriumadmin/OpenSpace
1
0
Fork 0
mirror of https://github.com/HKUDS/OpenSpace.git synced 2026-08-28 05:15:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

pin litellm>=1.83.7,<2.0.0: CVE-2026-42271 fixed in 1.83.7; the range also excludes the PYSEC-2026-2 compromised 1.82.7/1.82.8 releases

Browse source
This commit is contained in:
ameobius 2026-08-05 21:16:40 +03:00 • committed by aameobius
parent 618c8461da
commit 877ce7e430
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pyproject.toml
View file

@ -14,7 +14,7 @@ authors = [
]
dependencies = [
"litellm>=1.70.0,<1.82.7", # pinned to avoid PYSEC-2026-2 supply-chain compromise (1.82.7/1.82.8 were malicious)
"litellm>=1.83.7,<2.0.0", # CVE-2026-42271 fixed in 1.83.7; also excludes PYSEC-2026-2 malicious 1.82.7/1.82.8
"python-dotenv>=1.0.0",
"openai>=1.0.0",
"jsonschema>=4.25.0",