From a83b6ebb486a9524832b7b95e7e176bdee241563 Mon Sep 17 00:00:00 2001 From: boazgarty Date: Thu, 10 Sep 2026 14:31:08 +0300 Subject: [PATCH 1/2] fix(cookbook): bump pinned litellm to 1.84.0 in ollama-docker example cookbook/litellm-ollama-docker-image/requirements.txt pins litellm==1.83.14, which is vulnerable to two authentication-bypass CVEs fixed in 1.84.0: - CVE-2026-49468 / GHSA-4xpc-pv4p-pm3w: authentication bypass via Host header injection - CVE-2026-59822: unauthorized access due to authentication bypass Found via automated dependency scanning, cross-confirmed by two independent engines (OSV-Scanner + Trivy). Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01YHdnN5YdqU5YczHRmsmpXn --- cookbook/litellm-ollama-docker-image/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbook/litellm-ollama-docker-image/requirements.txt b/cookbook/litellm-ollama-docker-image/requirements.txt index 9b9181b2360..9a27954e7b8 100644 --- a/cookbook/litellm-ollama-docker-image/requirements.txt +++ b/cookbook/litellm-ollama-docker-image/requirements.txt @@ -1 +1 @@ -litellm==1.83.14 +litellm==1.84.0 From 8d1ac75775845ead4b72dfa2a70002811b0e7da3 Mon Sep 17 00:00:00 2001 From: boazgarty Date: Sat, 12 Sep 2026 11:05:13 +0300 Subject: [PATCH 2/2] fix: install pinned litellm via requirements.txt in Docker build The Dockerfile ran `pip install litellm` unpinned instead of installing from requirements.txt, so the CVE-fix version pin in requirements.txt never actually applied to the built image (flagged by greptile-apps[bot] review on this PR). Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_016iJYxKgKa3XvT14WTDimJG --- cookbook/litellm-ollama-docker-image/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbook/litellm-ollama-docker-image/Dockerfile b/cookbook/litellm-ollama-docker-image/Dockerfile index be237a4df77..04f4cf0ae4d 100644 --- a/cookbook/litellm-ollama-docker-image/Dockerfile +++ b/cookbook/litellm-ollama-docker-image/Dockerfile @@ -20,6 +20,6 @@ COPY . /app # Install any needed packages specified in requirements.txt -RUN python3 -m pip install litellm +RUN python3 -m pip install -r requirements.txt COPY start.sh /start.sh ENTRYPOINT [ "/bin/bash", "/start.sh" ]