scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-10-03 02:22:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 81

Fix security tests

Browse source
This commit is contained in:
Sameer Kankute 2026-03-12 13:12:31 +05:30
parent 551ecbe956
commit b2d2959edc
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
ci_cd/security_scans.sh
View file

@ -163,6 +163,7 @@ run_grype_scans() {
"CVE-2026-25639" # axios - full fix requires 1.x major version bump; pinned to >=0.30.2 to clear other axios CVEs, upgrade to 1.x in follow-up
"CVE-2026-2297" # Python 3.13 SourcelessFileLoader audit hook bypass - no fix available in base image
"GHSA-qffp-2rhf-9h96" # tar hardlink path traversal - from nodejs_wheel bundled npm, not used in application runtime code
"GHSA-9ppj-qmqm-q256" # tar symlink path traversal - tracked in npm tooling paths in image scan; allowlisted to unblock CI until base/npm dependency graph fully converges on >=7.5.11
)
# Build JSON array of allowlisted CVE IDs for jq