mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-22 00:31:44 +00:00
9f3de27fc9
- Update Dockerfile.database to upgrade zlib and busybox packages - Add npm overrides for glob, tar, and diff vulnerabilities in package.json files - Add jaraco-context>=6.1.0 to requirements.txt to fix GHSA-58pv-8j8x-9vj2 - Add CVE-2026-22184 (zlib) to ALLOWED_CVES in security_scans.sh for vulnerabilities without fixes Fixes: - Critical: zlib CVE-2026-22184 (no fix available, added to allowlist) - High: glob (GHSA-5j98-mcp5-4vw2) - fixed via npm overrides - High: jaraco-context (GHSA-58pv-8j8x-9vj2) - fixed via requirements.txt - Medium: tar (GHSA-29xp-372q-xqph) - fixed via npm overrides - Medium: busybox CVE-2025-60876 (no fix available, already in allowlist) - Low: diff (GHSA-73rr-hh4g-fpgx) - fixed via npm overrides
18 lines
403 B
JSON
18 lines
403 B
JSON
{
|
|
"dependencies": {
|
|
"prism-react-renderer": "^2.4.1",
|
|
"prisma": "^5.17.0",
|
|
"react-copy-to-clipboard": "^5.1.0"
|
|
},
|
|
"devDependencies": {
|
|
"@testing-library/jest-dom": "^6.8.0",
|
|
"@testing-library/react": "^14.3.1",
|
|
"@types/react-copy-to-clipboard": "^5.0.7",
|
|
"jest": "^29.7.0"
|
|
},
|
|
"overrides": {
|
|
"glob": ">=11.1.0",
|
|
"tar": ">=7.5.2",
|
|
"diff": ">=8.0.3"
|
|
}
|
|
}
|