From ebfd4cedad0281e626d47459e622e28c05d7f302 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 11 Aug 2025 22:25:45 +0000 Subject: [PATCH] fix: extra/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORCH-9726944 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-11501199 --- extra/requirements.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/extra/requirements.txt b/extra/requirements.txt index fb3cc0122a9b..027d78e7cf8a 100644 --- a/extra/requirements.txt +++ b/extra/requirements.txt @@ -4,4 +4,6 @@ google protobuf six omegaconf -compel \ No newline at end of file +compel +torch>=2.8.0 # not directly required, pinned by Snyk to avoid a vulnerability +transformers>=4.53.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file