LiteLLM v1.103.9 fixes container image scan findings
- The v1.103.9 notes describe one PR with one fix and state that upgrading requires no action.
- The deployment fix addresses image-scan findings involving brotli 1.2.0, the emSign ECC Root CA - G3, and packages unused in the lockfile.
- The release provides a cosign command for verifying the LiteLLM image and says it also applies to litellm-database, litellm-non_root, and docker.io/litellm/* images.
Our take
For teams that block deployments based on container scan findings, this patch may reduce maintenance work around LiteLLM images. The notes do not explain whether the flagged items were updated, removed, or handled another way, so operators should check their own scanner results; no change to inference behavior is described.
Sources
- litellm v1.103.9 · LiteLLM Releases
Further reading
- litellm v1.104.7 · LiteLLM Releases
- litellm v1.105.5 · LiteLLM Releases
- litellm v1.106.4 · LiteLLM Releases
The summary and analysis were generated by AI. The original sources are authoritative. AI content policy