From 5d3986536240fe9c1df69ceb3e9f455949fcecc2 Mon Sep 17 00:00:00 2001 From: Ishaan Jaff Date: Sat, 20 Apr 2024 11:58:15 -0700 Subject: [PATCH] fix - audio_transcriptions security fix --- litellm/proxy/proxy_server.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/litellm/proxy/proxy_server.py b/litellm/proxy/proxy_server.py index db85b7ba10..5ede7979da 100644 --- a/litellm/proxy/proxy_server.py +++ b/litellm/proxy/proxy_server.py @@ -4166,6 +4166,9 @@ async def audio_transcriptions( file.filename is not None ) # make sure filename passed in (needed for type) + # rename the file to a random hash file name -> we eventuall remove the file and don't want to remove any local files + file.filename = f"tmp-request" + str(uuid.uuid4()) + with open(file.filename, "wb+") as f: f.write(await file.read()) try: