mirror of
https://github.com/BerriAI/litellm.git
synced 2026-09-09 22:31:41 +00:00
c6c85e1140
Addresses 3 recent npm & Python CVEs: - CVE-2026-27903/27904 (minimatch regex DoS) - GHSA-qffp-2rhf-9h96 (tar path traversal) - CVE-2026-27888 (pypdf regex DoS) Changes: - Bump tar from 7.5.8 to 7.5.10 in all 5 Dockerfiles + package.json overrides - Bump minimatch from 10.2.1 to 10.2.4 in all Dockerfiles + package.json overrides - Bump pypdf from 6.6.2 to 6.7.3 in requirements.txt - Remove apk npm after global install to eliminate stale SBOM metadata Docker Scout verification: both litellm and litellm-non_root now report 0 CVEs. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
30 lines
No EOL
780 B
JSON
30 lines
No EOL
780 B
JSON
{
|
|
"dependencies": {
|
|
"prism-react-renderer": "^2.4.1",
|
|
"prisma": "^5.17.0",
|
|
"react-copy-to-clipboard": "^5.1.0"
|
|
},
|
|
"devDependencies": {
|
|
"@testing-library/jest-dom": "^6.8.0",
|
|
"@testing-library/react": "^14.3.1",
|
|
"@types/react-copy-to-clipboard": "^5.0.7",
|
|
"jest": "^29.7.0"
|
|
},
|
|
"overrides": {
|
|
"glob": ">=11.1.0",
|
|
"tar": ">=7.5.10",
|
|
"minimatch": ">=10.2.4",
|
|
"diff": ">=8.0.3",
|
|
"@isaacs/brace-expansion": ">=5.0.1",
|
|
"@babel/traverse": ">=7.23.2",
|
|
"ws": ">=7.5.10",
|
|
"http-proxy-middleware": ">=2.0.9",
|
|
"tar-fs": ">=2.1.4",
|
|
"webpack-dev-middleware": ">=5.3.4",
|
|
"braces": ">=3.0.3",
|
|
"axios": ">=0.30.2",
|
|
"webpack": ">=5.94.0",
|
|
"serve-static": ">=1.16.0",
|
|
"path-to-regexp": ">=0.1.12"
|
|
}
|
|
} |