mirror of
https://github.com/tiennm99/litellm.git
synced 2026-06-17 22:48:35 +00:00
Krish Dholakia
e7714f0ce6
* fix(docker): bump tar/minimatch/pypdf for CVE fixes + harden SBOM patching
- Bump tar 7.5.8→7.5.10, minimatch 10.2.1→10.2.4, pypdf 6.6.2→6.7.3
- Add sed-based SBOM metadata patching with properly indented find/sed
- Add npm package manager cleanup (apk del / apt-get purge) to remove
stale SBOM entries from image scanners
- Scope || true to only apk del via brace grouping { ... || true; }
- Guard npm root -g with non-empty assertion to prevent silent failures
- Scope minimatch sed regex to ^10.x to avoid matching other major versions
Addresses: CVE-2026-27903, CVE-2026-27904, GHSA-qffp-2rhf-9h96, CVE-2026-27888
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(docker): scope find to /usr/local/lib /usr/lib, drop autoremove
- Replace `find /` with `find /usr/local/lib /usr/lib` to avoid
traversing /proc, /sys, /dev during SBOM metadata patching
- Remove `apt-get autoremove -y` from Debian-based Dockerfiles to
prevent nodejs from being removed as an auto-installed dependency
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
31 lines
732 B
JSON
31 lines
732 B
JSON
{
|
|
"name": "proxy_admin_ui_tests",
|
|
"version": "1.0.0",
|
|
"description": "",
|
|
"main": "index.js",
|
|
"scripts": {},
|
|
"keywords": [],
|
|
"author": "",
|
|
"license": "ISC",
|
|
"devDependencies": {
|
|
"@playwright/test": "^1.47.2",
|
|
"@types/node": "^22.5.5"
|
|
},
|
|
"overrides": {
|
|
"glob": ">=11.1.0",
|
|
"tar": ">=7.5.10",
|
|
"minimatch": ">=10.2.4",
|
|
"diff": ">=8.0.3",
|
|
"@isaacs/brace-expansion": ">=5.0.1",
|
|
"@babel/traverse": ">=7.23.2",
|
|
"ws": ">=7.5.10",
|
|
"http-proxy-middleware": ">=2.0.9",
|
|
"tar-fs": ">=2.1.4",
|
|
"webpack-dev-middleware": ">=5.3.4",
|
|
"braces": ">=3.0.3",
|
|
"axios": ">=0.30.2",
|
|
"webpack": ">=5.94.0",
|
|
"serve-static": ">=1.16.0",
|
|
"path-to-regexp": ">=0.1.12"
|
|
}
|
|
} |