[PR #1827] [MERGED] Update litellm #7602

Closed
opened 2025-11-11 17:31:17 -06:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/1827
Author: @justinh-rahb
Created: 4/28/2024
Status: Merged
Merged: 4/28/2024
Merged by: @tjbck

Base: devHead: update-litellm


📝 Commits (6)

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 backend/requirements.txt (+2 -2)

📄 Description

Pull Request Checklist

  • Description: Briefly describe the changes in this pull request.
  • Changelog: Ensure a changelog entry following the format of Keep a Changelog is added at the bottom of the PR description.
  • Documentation: No documentation updates are required for this change.
  • Dependencies: The litellm dependency version has been updated to 1.35.28, which includes an updated version of Gunicorn (22.0.0).
  • Testing: No new tests are required for this change.
  • Code Review: The code has been self-reviewed and meets coding standards.

Description

This pull request updates the litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0). This update addresses a vulnerability in Gunicorn (CVE-2024-1135).

Changelog Entry

Security

  • Updated litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0) to address CVE-2024-1135.

Additional Information

This update is necessary to address a vulnerability in a transient dependency, Gunicorn (CVE-2024-1135).


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/1827 **Author:** [@justinh-rahb](https://github.com/justinh-rahb) **Created:** 4/28/2024 **Status:** ✅ Merged **Merged:** 4/28/2024 **Merged by:** [@tjbck](https://github.com/tjbck) **Base:** `dev` ← **Head:** `update-litellm` --- ### 📝 Commits (6) - [`92c98ed`](https://github.com/open-webui/open-webui/commit/92c98eda2e7340bc7c8f32d33bc49cec8498b1bb) Merge pull request #1781 from open-webui/dev - [`d401d77`](https://github.com/open-webui/open-webui/commit/d401d77cbd23a45bad7691619ce9604d5ed482fb) Merge pull request #1805 from open-webui/dev - [`9760997`](https://github.com/open-webui/open-webui/commit/97609970b23ffc73d39091ad42a5d9d2a1f7bcf9) Merge pull request #1806 from open-webui/dev - [`0455b80`](https://github.com/open-webui/open-webui/commit/0455b8060486a6aa4c63aa5c778494d2bc5be7a5) Merge pull request #1809 from open-webui/dev - [`c9589e2`](https://github.com/open-webui/open-webui/commit/c9589e21181d97d7cab2937e69a345ba60e4fe71) Merge pull request #1810 from open-webui/dev - [`d42517b`](https://github.com/open-webui/open-webui/commit/d42517b7ed563272614767a026cce619aedc0c55) Update LiteLLM (and Gunicorn) ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `backend/requirements.txt` (+2 -2) </details> ### 📄 Description ## Pull Request Checklist - [x] **Description:** Briefly describe the changes in this pull request. - [x] **Changelog:** Ensure a changelog entry following the format of [Keep a Changelog](https://keepachangelog.com/) is added at the bottom of the PR description. - [x] **Documentation:** No documentation updates are required for this change. - [x] **Dependencies:** The litellm dependency version has been updated to 1.35.28, which includes an updated version of Gunicorn (22.0.0). - [x] **Testing:** No new tests are required for this change. - [x] **Code Review:** The code has been self-reviewed and meets coding standards. --- ## Description This pull request updates the litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0). This update addresses a vulnerability in Gunicorn (CVE-2024-1135). ### Changelog Entry ### Security - Updated litellm dependency version to 1.35.28, which includes an updated version of Gunicorn (22.0.0) to address CVE-2024-1135. ### Additional Information This update is necessary to address a vulnerability in a transient dependency, Gunicorn (CVE-2024-1135). --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2025-11-11 17:31:17 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#7602