scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-07 08:26:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 89

chore(deps): bump nanoid to 3.3.18 to resolve osv-scan CVE

Browse source 
GHSA-2v37-7h3g-55p8 was disclosed against nanoid 3.3.17 (CVSS 8.2),
breaking osv-scan on every PR. nanoid is a transitive dep of postcss,
so this is a lock-only bump; package.json is unchanged.

Verified locally with osv-scanner v2.3.8 (No issues found).

Co-authored-by: Krrish Dholakia <krrish-berri-2@users.noreply.github.com>
This commit is contained in:
cursoragent 2026-08-13 17:28:49 +00:00
parent 9d069f21dc
commit 10f72fea82
No known key found for this signature in database
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ui/litellm-dashboard/package-lock.json generated
View file

@ -10319,9 +10319,9 @@
"license": "MIT"
},
"node_modules/nanoid": {
"version": "3.3.17",
"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz",
"integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==",
"version": "3.3.18",
"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
"integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
"funding": [
{
"type": "github",