mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-01 02:02:20 +00:00
82eb7405f5
pyjwt 2.13.0 -> 2.14.0 (uv.lock only, pyproject floor unchanged), moment 2.30.1 -> 2.31.0 and the brace-expansion override 5.0.9 -> 5.0.12 in the dashboard. oauthlib's only fixed release (4.0.0, 2026-09-28) is still inside the 3-day uv exclude-newer cooldown, so its two findings are ignored until 2026-10-02
19 lines
853 B
TOML
19 lines
853 B
TOML
[[IgnoredVulns]]
|
|
id = "GHSA-w8v5-vhqr-4h9v"
|
|
ignoreUntil = 2026-10-01
|
|
reason = "diskcache has no fixed release published; remove this entry once one exists"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-h7x2-h6g9-p789"
|
|
ignoreUntil = 2026-10-14
|
|
reason = "mlflow has no fixed release published (3.16.0, 2026-09-04, and master still store gateway secret api_base unvalidated); remove this entry once one exists"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-hj66-6f7g-4r5v"
|
|
ignoreUntil = 2026-10-02
|
|
reason = "oauthlib 4.0.0 (the only fixed release, 2026-09-28) is inside the 3-day uv exclude-newer cooldown; bump oauthlib and remove this entry once it clears"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-xpv3-w29h-x7cv"
|
|
ignoreUntil = 2026-10-02
|
|
reason = "oauthlib 4.0.0 (the only fixed release, 2026-09-28) is inside the 3-day uv exclude-newer cooldown; bump oauthlib and remove this entry once it clears"
|