Merge pull request #237 from bsatapat-jpg/fix/litellm-cve-0.5.0

asamal4 · web-flow · commit 965c009be452 · 2026-05-15T17:13:11.000+05:30
fix: upgrade litellm to 1.83.14 to address critical security vulnerability
diff --git a/lsc_agent_eval/pyproject.toml b/lsc_agent_eval/pyproject.toml
@@ -12,7 +12,7 @@ dependencies = [
     "httpx>=0.27.2",
     "tqdm>=4.67.1",
     "pyyaml>=6.0",
-    "litellm>=1.0.0",
+    "litellm>=1.83.7,<=1.83.14",
 ]
 
 [dependency-groups]
diff --git a/pyproject.toml b/pyproject.toml
@@ -11,7 +11,7 @@ dependencies = [
     # Core evaluation framework dependencies
     "ragas>=0.3.0",
     "deepeval>=1.3.0",
-    "litellm>=1.0.0",
+    "litellm>=1.83.7,<=1.83.14",
     "pydantic>=2.0.0",
     "pyyaml>=6.0",
     "pandas>=2.1.4",
diff --git a/uv.lock b/uv.lock
