Merge pull request #144 from aidenerdogan/security/pin-litellm-safe-version

patrickfleith · web-flow · commit 3a3636fb6e15 · 2026-03-26T12:11:44.000+01:00
security: Pin litellm to safe version 1.82.6
diff --git a/pyproject.toml b/pyproject.toml
@@ -30,7 +30,7 @@ dependencies = [
     "anthropic",
     "openai",
     "pydantic",
-    "litellm",
+    "litellm==1.82.6",  # Pin to safe version - DO NOT UPDATE - versions 1.82.7 and 1.82.8 compromised with malware
     "gradio",
     "loguru",
 ]

Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@ dependencies = [`
`30`	`30`	`"anthropic",`
`31`	`31`	`"openai",`
`32`	`32`	`"pydantic",`
`33`		`- "litellm",`
	`33`	`+ "litellm==1.82.6", # Pin to safe version - DO NOT UPDATE - versions 1.82.7 and 1.82.8 compromised with malware`
`34`	`34`	`"gradio",`
`35`	`35`	`"loguru",`
`36`	`36`	`]`