scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-09-05 08:07:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 136
litellm/litellm-js/proxy
History
user 8d1493ed08
fix(security): bump vulnerable dependencies 
pip:
- cryptography 43.0.3 → 46.0.7 (5 CVEs including CVSS 8.2 ECDH key leak)

npm:
- hono 4.1.4/4.12.7 → 4.12.12 (prototype pollution, cookie injection,
  path traversal, middleware bypass, IP matching bypass)
- @hono/node-server 1.19.6 → 1.19.13 (serveStatic middleware bypass)
- vite 7.3.1 → 7.3.2 (file read via WebSocket, path traversal, fs.deny bypass)
- lodash override 4.17.23 → 4.18.1 (code injection via _.template,
  prototype pollution via _.unset/_.omit)

mlflow left at 3.9.0 — 2 of 3 alerts have no upstream fix, and
3.11.1 is blocked by exclude-newer (transitive dep chain).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 19:35:19 +00:00
..
src feat(index.ts): initial commit for proxy edge worker 2024-03-27 10:15:20 -07:00
.npmrc chore: harden npm supply chain — pin overrides, enforce npm ci, add ignore-scripts (#24838) 2026-03-31 13:41:37 -07:00
package.json fix(security): bump vulnerable dependencies 2026-04-09 19:35:19 +00:00
README.md feat(index.ts): initial commit for proxy edge worker 2024-03-27 10:15:20 -07:00
tsconfig.json (UI) fix adding Vertex Models (#8129) 2025-01-30 21:11:08 -08:00
wrangler.toml feat(index.ts): initial commit for proxy edge worker 2024-03-27 10:15:20 -07:00

README.md 

npm install
npm run dev

npm run deploy