From a83b6ebb486a9524832b7b95e7e176bdee241563 Mon Sep 17 00:00:00 2001 From: boazgarty Date: Thu, 10 Sep 2026 14:31:08 +0300 Subject: [PATCH] fix(cookbook): bump pinned litellm to 1.84.0 in ollama-docker example cookbook/litellm-ollama-docker-image/requirements.txt pins litellm==1.83.14, which is vulnerable to two authentication-bypass CVEs fixed in 1.84.0: - CVE-2026-49468 / GHSA-4xpc-pv4p-pm3w: authentication bypass via Host header injection - CVE-2026-59822: unauthorized access due to authentication bypass Found via automated dependency scanning, cross-confirmed by two independent engines (OSV-Scanner + Trivy). Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01YHdnN5YdqU5YczHRmsmpXn --- cookbook/litellm-ollama-docker-image/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbook/litellm-ollama-docker-image/requirements.txt b/cookbook/litellm-ollama-docker-image/requirements.txt index 9b9181b2360..9a27954e7b8 100644 --- a/cookbook/litellm-ollama-docker-image/requirements.txt +++ b/cookbook/litellm-ollama-docker-image/requirements.txt @@ -1 +1 @@ -litellm==1.83.14 +litellm==1.84.0