mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-07 08:26:10 +00:00
Addresses 3 recent npm & Python CVEs: - CVE-2026-27903/27904 (minimatch regex DoS) - GHSA-qffp-2rhf-9h96 (tar path traversal) - CVE-2026-27888 (pypdf regex DoS) Changes: - Bump tar from 7.5.8 to 7.5.10 in all 5 Dockerfiles + package.json overrides - Bump minimatch from 10.2.1 to 10.2.4 in all Dockerfiles + package.json overrides - Bump pypdf from 6.6.2 to 6.7.3 in requirements.txt - Remove apk npm after global install to eliminate stale SBOM metadata Docker Scout verification: both litellm and litellm-non_root now report 0 CVEs. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| blog | ||
| docs | ||
| img | ||
| release_notes | ||
| src | ||
| static | ||
| .gitignore | ||
| .trivyignore | ||
| babel.config.js | ||
| Dockerfile | ||
| docusaurus.config.js | ||
| index.md | ||
| package-lock.json | ||
| package.json | ||
| README.md | ||
| sidebars.js | ||
Website
This website is built using Docusaurus 2, a modern static website generator.
Installation
$ yarn
Local Development
$ yarn start
This command starts a local development server and opens up a browser window. Most changes are reflected live without having to restart the server.
Build
$ yarn build
This command generates static content into the build directory and can be served using any static contents hosting service.
Deployment
Using SSH:
$ USE_SSH=true yarn deploy
Not using SSH:
$ GIT_USER=<Your GitHub username> yarn deploy
If you are using GitHub pages for hosting, this command is a convenient way to build the website and push to the gh-pages branch.