From e1cbdb9e84f7405eb503b0329ef33b43d91e2fd2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 30 Sep 2025 02:03:41 +0000 Subject: [PATCH] fix: extra/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052818 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052821 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052968 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052977 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052994 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-13018959 --- extra/requirements.txt | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/extra/requirements.txt b/extra/requirements.txt index fb3cc0122a9b..027d78e7cf8a 100644 --- a/extra/requirements.txt +++ b/extra/requirements.txt @@ -4,4 +4,6 @@ google protobuf six omegaconf -compel \ No newline at end of file +compel +torch>=2.8.0 # not directly required, pinned by Snyk to avoid a vulnerability +transformers>=4.53.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file