- Update Dockerfile.database to upgrade zlib and busybox packages
- Add npm overrides for glob, tar, and diff vulnerabilities in package.json files
- Add jaraco-context>=6.1.0 to requirements.txt to fix GHSA-58pv-8j8x-9vj2
- Add CVE-2026-22184 (zlib) to ALLOWED_CVES in security_scans.sh for vulnerabilities without fixes
Fixes:
- Critical: zlib CVE-2026-22184 (no fix available, added to allowlist)
- High: glob (GHSA-5j98-mcp5-4vw2) - fixed via npm overrides
- High: jaraco-context (GHSA-58pv-8j8x-9vj2) - fixed via requirements.txt
- Medium: tar (GHSA-29xp-372q-xqph) - fixed via npm overrides
- Medium: busybox CVE-2025-60876 (no fix available, already in allowlist)
- Low: diff (GHSA-73rr-hh4g-fpgx) - fixed via npm overrides
* fix(main.py): fix retries being multiplied when using openai sdk
Closes https://github.com/BerriAI/litellm/pull/7130
* docs(prompt_management.md): add langfuse prompt management doc
* feat(team_endpoints.py): allow teams to add their own models
Enables teams to call their own finetuned models via the proxy
* test: add better enforcement check testing for `/model/new` now that teams can add their own models
* docs(team_model_add.md): tutorial for allowing teams to add their own models
* test: fix test