mirror of
https://github.com/BerriAI/litellm.git
synced 2026-10-02 02:11:58 +00:00
431ecd8920
gitpython 3.1.62 (2026-09-07) and tornado 6.5.10 (2026-09-15) are past the 3-day uv cooldown. diskcache still has no fixed release, so its ignore moves from 2026-10-01 to 2026-11-01
19 lines
853 B
TOML
19 lines
853 B
TOML
[[IgnoredVulns]]
|
|
id = "GHSA-w8v5-vhqr-4h9v"
|
|
ignoreUntil = 2026-11-01
|
|
reason = "diskcache has no fixed release published; remove this entry once one exists"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-h7x2-h6g9-p789"
|
|
ignoreUntil = 2026-10-14
|
|
reason = "mlflow has no fixed release published (3.16.0, 2026-09-04, and master still store gateway secret api_base unvalidated); remove this entry once one exists"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-hj66-6f7g-4r5v"
|
|
ignoreUntil = 2026-10-02
|
|
reason = "oauthlib 4.0.0 (the only fixed release, 2026-09-28) is inside the 3-day uv exclude-newer cooldown; bump oauthlib and remove this entry once it clears"
|
|
|
|
[[IgnoredVulns]]
|
|
id = "GHSA-xpv3-w29h-x7cv"
|
|
ignoreUntil = 2026-10-02
|
|
reason = "oauthlib 4.0.0 (the only fixed release, 2026-09-28) is inside the 3-day uv exclude-newer cooldown; bump oauthlib and remove this entry once it clears"
|