open-git/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2025-12-06 19:43:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

security fix

Browse Source
This commit is contained in:
Ishaan Jaffer
2025-11-14 18:34:53 -08:00
parent 09e226b140
commit a1286fb609
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
docs/my-website/.trivyignore Normal file
View File

@@ -0,0 +1,7 @@
# js-yaml CVE-2025-64718
# This vulnerability is not applicable because we've forced js-yaml to version 4.1.1
# via npm overrides in package.json. Trivy incorrectly reports this based on
# dependency requirements in the lockfile, but the actual installed version is 4.1.1.
# Verified with: npm list js-yaml
CVE-2025-64718

3
docs/my-website/package.json
View File

@@ -45,7 +45,8 @@
]
},
"engines": {
"node": ">=16.14"
"node": ">=16.14",
"npm": ">=8.3.0"
},
"overrides": {
"webpack-dev-server": ">=5.2.1",