litellm - 💡(How to fix) Fix [Bug]: fix critical CVE-2026-24486 and CVE-2025-67221 [2 comments, 1 participants]

TL;DR

Update the cryptography, fastapi_sso, orjson, and python-multipart packages to the latest versions to address known vulnerabilities.

Guidance

• Review the provided CVE links to understand the vulnerabilities in the current package versions.
• Update the dependencies in your project to use the latest versions of the affected packages.
• Verify the updates by checking the package versions in your project and ensuring they match the latest available versions.
• Consider monitoring the project's dependencies for future vulnerabilities and updates.

Example

No code snippet is provided as the issue is related to package updates rather than code changes.

Notes

The provided information does not specify the exact latest versions of the packages, so it is recommended to check the package repositories or documentation for the most up-to-date version information.

Recommendation

Apply workaround: Update the affected packages to the latest versions to mitigate the known vulnerabilities, as the issue implies that the current versions are vulnerable and need to be updated.