mirror of
https://github.com/BerriAI/litellm.git
synced 2026-08-28 05:25:59 +00:00
bc71564d1d
GHSA-fp3f-mc75-235c was published at 19:29 UTC today, hours after #36212 landed, and covers a different pypdf issue (large memory use on big /ToUnicode streams) that lands on the same 6.15.0 fix. It reds osv-scan on every PR into staging again. pypdf 6.15.0 is still inside the repo's P3D exclude-newer window until 08-09, so uv cannot lock it yet and widening exclude-newer to pull it in early would weaken the freshness guard for every package. This gets the same 08-12 ignoreUntil as the first pypdf entry so both drop together in the bump. Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
14 lines
617 B
TOML
14 lines
617 B
TOML
[[IgnoredVulns]]
|
|
id = "GHSA-fwg2-594c-jp42"
|
|
ignoreUntil = 2026-08-12
|
|
reason = "pypdf 6.15.0 (the fix) published 2026-08-06 and is still inside the P3D exclude-newer window, so uv cannot lock it yet; bump and drop this entry from 2026-08-09"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-fp3f-mc75-235c"
|
|
ignoreUntil = 2026-08-12
|
|
reason = "second pypdf advisory with the same 6.15.0 fix, published 2026-08-07 after the first; drop alongside GHSA-fwg2-594c-jp42 in the same bump"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-w8v5-vhqr-4h9v"
|
|
ignoreUntil = 2026-09-09
|
|
reason = "diskcache has no fixed release published; remove this entry once one exists"
|