Commit Graph

22 Commits

Author SHA1 Message Date
yuneng-jiang ce586ec3d1 Overriding lodash-es with version 4.17.23 in docs 2026-01-22 12:13:40 -08:00
yuneng-jiang 3ddc15a081 Adding lodash-es to allowlist 2026-01-22 11:26:04 -08:00
yuneng-jiang 88c7b45aee adding node-tar cve allowlist 2026-01-22 10:39:19 -08:00
Yuta Saito f8e25aa016 chore: add ALLOWED_CVES. Because Wolfi glibc still flagged even on 2.42-r5. 2026-01-16 18:23:09 +09:00
Yuta Saito 4e78394b21 chore: address jaraco.context path traversal vulnerability (GHSA-58pv-8j8x-9vj2) 2026-01-16 14:20:24 +09:00
Yuta Saito 94e15a92b2 chore: add zlib to allow list 2026-01-16 11:41:54 +09:00
Yuta Saito 4daac9e332 chore: add ALLOWED_CVES 2026-01-13 10:30:34 +09:00
Yuta Saito 54b21cabf7 chore: add config option 2026-01-13 10:19:12 +09:00
Ishaan Jaffer bdbbc9db62 run_secret_detection 2026-01-07 16:43:31 +05:30
Ishaan Jaffer 49f4005001 fix 2026-01-07 15:07:32 +05:30
Alexsander Hamir 936aa6821f [Fix] CI/CD - litellm_security_tests (#18567) 2026-01-01 14:20:04 -08:00
Alexsander Hamir 5534038e93 Fix CI: Revert security scan changes and add GitGuardian ignore rules (#18358) 2025-12-22 17:03:53 -08:00
Ishaan Jaffer bae488d9cd skip GITGUARDIAN_API_KEY 2025-12-20 20:53:22 +05:30
Alexsander Hamir 4134fab74d add: new security scan (#18148) 2025-12-17 12:53:15 -08:00
Ishaan Jaffer 8539aac85a fix scans 2025-12-06 15:53:49 -08:00
Ishaan Jaffer 2f0ec47426 GHSA-5j98-mcp5-4vw2 fix 2025-11-22 12:12:28 -08:00
Ishaan Jaffer a4e0869077 fix scan 2025-10-11 11:38:43 -07:00
Ishaan Jaffer 34579b640e fix sec san 2025-10-11 10:15:35 -07:00
Ishaan Jaffer 2bce4ab74d fix: sec scans 2025-10-11 09:34:48 -07:00
Ishaan Jaffer 13b0e97759 ALLOWED_IDS_JSON sec scan 2025-09-27 17:15:28 -07:00
Ishaan Jaffer fbc5b73431 fix sec scans 2025-09-26 19:44:57 -07:00
Ishaan Jaff ac2d349161 [Security] Ensure LiteLLM Images have 0 Critical, High, Medium vulnerabilities with CVSS ≥ 4.0 (#14357)
* updated scans

* fix scans

* fix litellm_security_tests

* fix

* fix count CVEE

* add readme

* fix Security Scans

* fix: starlette==0.47.2 # starlette fastapi dep

* bump fastapi==0.115.14

* bump 0.116.1
2025-09-08 16:49:52 -07:00