mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-22 00:31:44 +00:00
- Update Dockerfile.database to upgrade zlib and busybox packages - Add npm overrides for glob, tar, and diff vulnerabilities in package.json files - Add jaraco-context>=6.1.0 to requirements.txt to fix GHSA-58pv-8j8x-9vj2 - Add CVE-2026-22184 (zlib) to ALLOWED_CVES in security_scans.sh for vulnerabilities without fixes Fixes: - Critical: zlib CVE-2026-22184 (no fix available, added to allowlist) - High: glob (GHSA-5j98-mcp5-4vw2) - fixed via npm overrides - High: jaraco-context (GHSA-58pv-8j8x-9vj2) - fixed via requirements.txt - Medium: tar (GHSA-29xp-372q-xqph) - fixed via npm overrides - Medium: busybox CVE-2025-60876 (no fix available, already in allowlist) - Low: diff (GHSA-73rr-hh4g-fpgx) - fixed via npm overrides |
||
|---|---|---|
| .. | ||
| .grype.yaml | ||
| baseline_db.py | ||
| check_file_length.py | ||
| check_files_match.py | ||
| publish-proxy-extras.sh | ||
| run_migration.py | ||
| security_scans.sh | ||
| security_scans_readme.md | ||
| TEST_KEY_PATTERNS.md | ||