Skip to content

Commit 25d265b

Browse files
fix: Exclude litellm==1.107.0 from extras (#8104)
### Description That version [is vulnerable](https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/#payload-2-the-backdoor-in-sitecustomizepy) so it would be great to exclude it from extras. To be honest, we don't use that extra but since we use poetry, the litellm version range shows up in our poetry.lock and it doesn't look good for our security team. Thanks! #### Issues * resolves: #8103 * resolves: PY-3035 #### Reminders - Please add tests to validate your changes, and lint your code using `uv run ruff`. - Add GH Issue ID _&_ Linear ID (if applicable) - PR title should use [conventional commit](https://develop.sentry.dev/engineering-practices/commit-messages/#type) style (`feat:`, `fix:`, `ref:`, `meta:`) - For external contributors: [CONTRIBUTING.md](https://github.com/getsentry/sentry-python/blob/master/CONTRIBUTING.md), [Sentry SDK development docs](https://develop.sentry.dev/sdk/), [Discord community](https://discord.gg/Ww9hbqr) Co-authored-by: Jonny <jonny-norwine@users.noreply.github.com>
1 parent 60116ac commit 25d265b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎setup.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ def get_file_text(file_name):
6767
"langchain": ["langchain>=0.0.210"],
6868
"langgraph": ["langgraph>=0.6.6"],
6969
"launchdarkly": ["launchdarkly-server-sdk>=9.8.0"],
70-
"litellm": ["litellm>=1.77.5,!=1.82.7,!=1.82.8"],
70+
"litellm": ["litellm>=1.77.5,!=1.82.7,!=1.82.8,!=1.107.0"],
7171
"litestar": ["litestar>=2.0.0"],
7272
"loguru": ["loguru>=0.5"],
7373
"mcp": ["mcp>=1.15.0"],

0 commit comments

Comments
 (0)