From e332e9378622ffa4fbc1a7738ca345dd838138ce Mon Sep 17 00:00:00 2001
From: Krish Dholakia <krrishdholakia@gmail.com>
Date: Wed, 18 Dec 2024 09:38:52 -0800
Subject: [PATCH] Litellm security fixes (#7282)

* build(Dockerfile): bump node version

* build(Dockerfile): bump python version

fix critical errors

* build(requirements.txt): fix snyk errors
---
 Dockerfile                                            | 4 ++--
 cookbook/litellm-ollama-docker-image/requirements.txt | 2 +-
 litellm-js/spend-logs/Dockerfile                      | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a6127dd4e5..7c8bfb876a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,8 @@
 # Base image for building
-ARG LITELLM_BUILD_IMAGE=python:3.11.8-slim
+ARG LITELLM_BUILD_IMAGE=python:3.13.1-slim
 
 # Runtime image
-ARG LITELLM_RUNTIME_IMAGE=python:3.11.8-slim
+ARG LITELLM_RUNTIME_IMAGE=python:3.13.1-slim
 # Builder stage
 FROM $LITELLM_BUILD_IMAGE AS builder
 
diff --git a/cookbook/litellm-ollama-docker-image/requirements.txt b/cookbook/litellm-ollama-docker-image/requirements.txt
index 0cd6312fbc..6d24983e38 100644
--- a/cookbook/litellm-ollama-docker-image/requirements.txt
+++ b/cookbook/litellm-ollama-docker-image/requirements.txt
@@ -1 +1 @@
-litellm
\ No newline at end of file
+litellm==1.55.3
\ No newline at end of file
diff --git a/litellm-js/spend-logs/Dockerfile b/litellm-js/spend-logs/Dockerfile
index ce819c77a4..e96b6a1fa4 100644
--- a/litellm-js/spend-logs/Dockerfile
+++ b/litellm-js/spend-logs/Dockerfile
@@ -1,5 +1,5 @@
 # Use the specific Node.js v20.11.0 image
-FROM node:20.11.0
+FROM node:20.18.1
 
 # Set the working directory inside the container
 WORKDIR /app