ghcr.io/berriai/litellm:1.106.1 container image
GitHub Container RegistryScanned 21 Oct 2026
Deployed by 1 of 18,208 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/berriai/litellm
ghcr.io/berriai/litellm:1.106.1 resolved to 1acf80698f7e, scanned 21 Oct 2026: 22 findings, 0 critical; deployed by 1 chart, among them litellm-helm.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
22 distinct on this digest
Findings for digest 1acf80698f7e as scanned on 21 Oct 2026 with syft 1.42.1 for linux/amd64, advisories as of 21 Oct 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-5wr8-gcqf-gqf3 | aiohttp | 3.14.4 |
| Low | GHSA-9xw5-w5jj-pvcg | aiohttp | 3.14.4 |
| Low | GHSA-6cjc-53gc-5rqm | aiohttp | 3.14.4 |
| Low | GHSA-f9xw-jh8m-3mwq | aiohttp | 3.14.4 |
| Low | PYSEC-2026-4183 | pyjwt | 2.15.0 |
| Low | CGA-8fx3-25f8-fh5x | python-3.13 | no fix listed |
| Low | GHSA-pqxq-w44r-73xw | aiohttp | 3.14.4 |
| Low | GHSA-6q48-6c7w-9gw2 | certifi | 2026.10.19 |
| Low | GHSA-2g87-pp6c-29x5 | aiohttp | 3.14.4 |
| Low | GHSA-42vr-xj54-vc7v | pyjwt | 2.15.0 |
| Low | CGA-fv7m-5pp8-x296 | glibc-2.44 | 2.44-r8 |
| Low | CGA-g73w-6cxg-73cx | python-3.13 | no fix listed |
| Low | CGA-5mg5-hvq2-8763 | glibc-2.44 | 2.44-r8 |
| Low | CGA-3f6x-5fcp-398c | alsa-lib | no fix listed |
| Low | CGA-3g3j-42jj-77j3 | glibc-2.44 | 2.44-r8 |
| Low | CGA-4gmv-8mr7-5pxx | glibc-2.44 | no fix listed |
| Low | CGA-8grr-r22f-r3r2 | alsa-lib | no fix listed |
| Low | CGA-cvgw-3cr4-v3w5 | alsa-lib | no fix listed |
| Low | CGA-32jh-59ph-xj58 | ca-certificates | 20260909-r3 |
| Low | CGA-53q8-cxrp-gx53 | glibc-2.44 | 2.44-r8 |
| Low | GHSA-gx76-c99x-2c96 | aiohttp | 3.14.4 |
| Low | GHSA-494j-54xm-rwp3 | aiohttp | 3.14.4 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| litellm-helmlitellm | 1.106.1 | 1.106.1 | 2 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.