Skip to content

Commit 1c92f47

Browse files
fix(security): pin litellm<1.82.6 to mitigate supply chain attack
Versions >=1.82.6 are compromised via supply chain attack (BerriAI/litellm#21971). The previous spec (^1.67.2) had no upper bound protection. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 01b08c9 commit 1c92f47

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ python = ">=3.10,<3.14"
1515
pydantic = "^2.7.3"
1616
pydantic-xml = "<=2.17.0"
1717
loguru = "^0.7.2"
18-
litellm = "^1.67.2"
18+
litellm = ">=1.67.2,<1.82.6"
1919
xmltodict = "^0.13.0"
2020
colorama = "^0.4.6"
2121
jsonpath-ng = "^1.7.0"

0 commit comments

Comments
 (0)