반응형 English/Python2 [Python] LiteLLM 1.107.0 Supply Chain Attack: Were You Affected? A credential-stealing LiteLLM 1.107.0 was on PyPI, Docker Hub, and GHCR for up to 2.5 hours on October 21, 2026. If you installed LiteLLM without a pinned version or pulled latest in that window, rebuild and rotate your keys. Current as of October 26, 2026, based on LiteLLM's incident report (October 21), attack-chain record (October 23), and tracking issue, plus PyPI and Docker Hub status. Lite.. 2026. 10. 26. [Python] What Is CVE-2026-115557? 3.14.9 Isn't the Fix CVE-2026-115557, published by the Python Software Foundation (PSF) on October 24, 2026, covers eight compromised eMudhra CA keys that Python's ssl module didn't reject. Python 3.14.9 lacks the fix; 3.14.10 has it. Python added a denylist (a block list) to ssl that rejects these keys regardless of which trust list your app uses. It shipped on October 25 in 3.15.2, 3.14.10, 3.13.18, 3.12.16, and 3.. 2026. 10. 26. 이전 1 다음 728x90 반응형
