<!channel> We're investigating our exposure to the LiteLLM vuln. tl;dr: our production environments are unaffected We're investigating dev environments now. Looks like a couple GitHub actions might be affected, we're rotating the relevant secrets If you're an OpenHands open source dev, and bypassed the lockfile while installing dependencies, you should check if you're affected. More info: https://github.com/BerriAI/litellm/issues/24512

@wooden-umbrella-84098 Thanks for the heads up, we are in the same shoe

The most similar incident I know for such a widely used library was still ssh...