Commit graph

6 commits

Author SHA1 Message Date
Alexsander Hamir
9f3de27fc9 Fix security vulnerabilities in Docker image and dependencies
- Update Dockerfile.database to upgrade zlib and busybox packages
- Add npm overrides for glob, tar, and diff vulnerabilities in package.json files
- Add jaraco-context>=6.1.0 to requirements.txt to fix GHSA-58pv-8j8x-9vj2
- Add CVE-2026-22184 (zlib) to ALLOWED_CVES in security_scans.sh for vulnerabilities without fixes

Fixes:
- Critical: zlib CVE-2026-22184 (no fix available, added to allowlist)
- High: glob (GHSA-5j98-mcp5-4vw2) - fixed via npm overrides
- High: jaraco-context (GHSA-58pv-8j8x-9vj2) - fixed via requirements.txt
- Medium: tar (GHSA-29xp-372q-xqph) - fixed via npm overrides
- Medium: busybox CVE-2025-60876 (no fix available, already in allowlist)
- Low: diff (GHSA-73rr-hh4g-fpgx) - fixed via npm overrides
2026-01-15 17:07:50 -08:00
Ishaan Jaffer
d92c5bb0d7 fix pkg lock 2025-11-22 11:51:15 -08:00
Sashanken
c6626559a2 Fixed Log Tab Key Alias filtering inaccurately for failed logs 2025-09-11 13:05:48 -07:00
Krish Dholakia
ec36353b41
fix(main.py): fix retries being multiplied when using openai sdk (#7221)
* fix(main.py): fix retries being multiplied when using openai sdk

Closes https://github.com/BerriAI/litellm/pull/7130

* docs(prompt_management.md): add langfuse prompt management doc

* feat(team_endpoints.py): allow teams to add their own models

Enables teams to call their own finetuned models via the proxy

* test: add better enforcement check testing for `/model/new` now that teams can add their own models

* docs(team_model_add.md): tutorial for allowing teams to add their own models

* test: fix test
2024-12-14 11:56:55 -08:00
Krish Dholakia
a1d9e96b31
LiteLLM Minor Fixes & Improvements (09/25/2024) (#5893)
* fix(langfuse.py): support new langfuse prompt_chat class init params

* fix(langfuse.py): handle new init values on prompt chat + prompt text templates

fixes error caused during langfuse logging

* docs(openai_compatible.md): clarify `openai/` handles correct routing for `/v1/completions` route

Fixes https://github.com/BerriAI/litellm/issues/5876

* fix(utils.py): handle unmapped gemini model optional param translation

Fixes https://github.com/BerriAI/litellm/issues/5888

* fix(o1_transformation.py): fix o-1 validation, to not raise error if temperature=1

Fixes https://github.com/BerriAI/litellm/issues/5884

* fix(prisma_client.py): refresh iam token

Fixes https://github.com/BerriAI/litellm/issues/5896

* fix: pass drop params where required

* fix(utils.py): pass drop_params correctly

* fix(types/vertex_ai.py): fix generation config

* test(test_max_completion_tokens.py): fix test

* fix(vertex_and_google_ai_studio_gemini.py): fix map openai params
2024-09-26 16:41:44 -07:00
Ishaan Jaff
d3e72e1c3b (fix) create key flow 2024-03-29 10:08:35 -07:00