ai-workspace-services/litellm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adding lodash-es to allowlist

Browse Source
This commit is contained in:
yuneng-jiang 2026-01-22 11:26:04 -08:00
parent a7bafadd26
commit 3ddc15a081
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ci_cd/security_scans.sh
View File

@ -138,6 +138,7 @@ run_grype_scans() {
"CVE-2026-22184" # zlib untgz buffer overflow - untgz unused + no fixed Wolfi build yet
"GHSA-58pv-8j8x-9vj2" # jaraco.context path traversal - setuptools vendored only (v5.3.0), not used in application code (using v6.1.0+)
"GHSA-r6q2-hw4h-h46w" # node-tar not used by application runtime, Linux-only container, not affect by macOS APFS-specific exploit
"CVE-2025-13465" # lodash-es is found in the docs dependencies, not used in application code
)
# Build JSON array of allowlisted CVE IDs for jq