Skip to content

Commit a867451

Browse files
cyrus2281claude
andcommitted
fix(DATAGO-135081): bump litellm 1.74.3 -> 1.83.14 for critical vulnerability fixes
Addresses CVE-2026-35030 (CRITICAL) and CVE-2026-35029 (HIGH) across the llm, llm_ext_release, and all extras. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 954d6ed commit a867451

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

pyproject.toml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ dependencies = [
4040
[project.optional-dependencies]
4141
# Basic LLM functionality
4242
llm = [
43-
"litellm==1.74.3",
43+
"litellm==1.83.14", # [CVE-2026-35030, CVE-2026-35029] Security fix (bumped from 1.74.3)
4444
]
4545

4646
# OpenAI specific dependencies
@@ -137,7 +137,7 @@ llm_ext_release = [
137137
"jiter==0.9.0",
138138
"jsonschema==4.23.0",
139139
"jsonschema-specifications==2024.10.1",
140-
"litellm==1.74.3",
140+
"litellm==1.83.14", # [CVE-2026-35030, CVE-2026-35029] Security fix (bumped from 1.74.3)
141141
"MarkupSafe==3.0.2",
142142
"multidict==6.2.0",
143143
"openai==1.72.0",
@@ -290,7 +290,7 @@ all = [
290290
"langchain==0.3.21",
291291

292292
# From llm
293-
"litellm==1.74.3",
293+
"litellm==1.83.14", # [CVE-2026-35030, CVE-2026-35029] Security fix (bumped from 1.74.3)
294294

295295
# From openai
296296
"openai==1.72.0",

0 commit comments

Comments
 (0)