1 Commits

Author	SHA1	Message	Date
shin-bot-litellm	df042f7545	litellm_fix(security): allowlist Next.js CVEs for 7 days (#20169) ... Temporarily allowlist Next.js vulnerabilities in UI dashboard: - GHSA-h25m-26qc-wcjf (HIGH: DoS via request deserialization) - CVE-2025-59471 (MEDIUM: Image Optimizer DoS) Fix: Upgrade to Next.js 15.5.10+ or 16.1.5+ (7-day timeline) Changes: - Added .trivyignore with Next.js CVEs - Updated security_scans.sh to use --ignorefile flag	2026-01-31 10:25:57 -08:00