litellm - ✅(Solved) Fix upgrade click to 8.3.3 [1 pull requests, 1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
BerriAI/litellm#27174Fetched 2026-05-06 06:15:46
View on GitHub
Comments
0
Participants
1
Timeline
1
Reactions
0
Author
Participants
Timeline (top)
cross-referenced ×1

Fix Action

Fix / Workaround

possible to upgrade to 8.3.3 ?

PR fix notes

PR #27220: chore: upgrade click dependency to 8.3.3

Description (problem / solution / changelog)

Relevant issues

Fixes: #27174

Linear ticket

<!-- if you are an internal contributor, add the Linear ticket e.g. "Resolves LIT-1234" to magically link the Linear ticket to the GitHub PR -->

Pre-Submission checklist

Please complete all items before asking a LiteLLM maintainer to review your PR

  • I have Added testing in the tests/test_litellm/ directory, Adding at least 1 test is a hard requirement - see details
  • My PR passes all unit tests on make test-unit
  • My PR's scope is as isolated as possible, it only solves 1 specific problem
  • I have requested a Greptile review by commenting @greptileai and received a Confidence Score of at least 4/5 before requesting a maintainer review

Delays in PR merge?

If you're seeing a delay in your PR being merged, ping the LiteLLM Team on Slack (#pr-review).

CI (LiteLLM team)

CI status guideline:

  • 50-55 passing tests: main is stable with minor issues.
  • 45-49 passing tests: acceptable but needs attention
  • <= 40 passing tests: unstable; be careful with your merges and assess the risk.
  • Branch creation CI run
    Link:

  • CI run for the last commit
    Link:

  • Merge / cherry-pick CI run
    Links:

Screenshots / Proof of Fix

<!-- Include screenshots, screen recordings, or log output demonstrating that your changes work as expected. For bug fixes: show reproduction before the fix and passing behavior after. For new features: show the feature working end-to-end. For UI changes: include before/after screenshots. -->

Type

<!-- Select the type of Pull Request --> <!-- Keep only the necessary ones -->

🆕 New Feature 🐛 Bug Fix 🧹 Refactoring 📖 Documentation 🚄 Infrastructure ✅ Test

Changes

Changed files

  • pyproject.toml (modified, +1/-1)
RAW_BUFFERClick to expand / collapse

current version of click < 8.3.3 has a high vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-7246 https://www.mend.io/vulnerability-database/CVE-2026-7246/

possible to upgrade to 8.3.3 ?

thanks

extent analysis

TL;DR

Upgrading to Click version 8.3.3 or later is likely the most effective fix for the high vulnerability issue.

Guidance

  • Verify the current version of Click being used to confirm it is indeed below 8.3.3.
  • Check the compatibility of Click version 8.3.3 with the existing project dependencies and environment.
  • Review the release notes for Click version 8.3.3 to understand any potential breaking changes or updates required.
  • Test the upgrade in a non-production environment before applying it to production to ensure a smooth transition.

Notes

The provided links to CVE-2026-7246 suggest a significant security risk, making the upgrade a priority. However, the feasibility of the upgrade depends on the project's specific dependencies and environment.

Recommendation

Apply workaround: Upgrade to Click version 8.3.3 or later, as it directly addresses the known vulnerability, thereby enhancing the security of the application.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING