wangbo/ComfyUI-Manager
1
0
Fork 0
mirror of https://github.com/Comfy-Org/ComfyUI-Manager.git synced 2026-07-26 10:07:38 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(security): add litellm supply chain attack detection and improve pip matching (#2731)
Python Linting / Run Ruff (push) Has been cancelled
Details

Browse Source 
- Add litellm==1.82.7 and litellm==1.82.8 to blacklist (PYSEC-2026-2)
- Add ultralytics==8.3.42 to blacklist
- Replace substring matching with exact version set matching
- Remove early break to detect multiple malicious packages
This commit is contained in:
Dr.Lt.Data
2026-03-26 04:17:46 +09:00
committed by GitHub
parent d870273d4b
commit 2007eab26d
2 changed files with 54 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pyproject.toml
+1 -1
View File
@@ -1,7 +1,7 @@
[project]
name = "comfyui-manager"
description = "ComfyUI-Manager provides features to install and manage custom nodes for ComfyUI, as well as various functionalities to assist with ComfyUI."
version = "3.39.2"
version = "3.39.3"
license = { file = "LICENSE.txt" }
dependencies = ["GitPython", "PyGithub", "matrix-nio", "transformers", "huggingface-hub>0.20", "typer", "rich", "typing-extensions", "toml", "uv", "chardet"]