scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-13 23:11:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 101

fix(cookbook): bump pinned litellm to 1.84.0 in ollama-docker example

Browse source 
cookbook/litellm-ollama-docker-image/requirements.txt pins
litellm==1.83.14, which is vulnerable to two authentication-bypass
CVEs fixed in 1.84.0:

- CVE-2026-49468 / GHSA-4xpc-pv4p-pm3w: authentication bypass via
  Host header injection
- CVE-2026-59822: unauthorized access due to authentication bypass

Found via automated dependency scanning, cross-confirmed by two
independent engines (OSV-Scanner + Trivy).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YHdnN5YdqU5YczHRmsmpXn
This commit is contained in:
boazgarty 2026-09-10 14:31:08 +03:00
parent e5da59336d
commit a83b6ebb48
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
cookbook/litellm-ollama-docker-image/requirements.txt
View file

@ -1 +1 @@
litellm==1.83.14
litellm==1.84.0