gavindiaz/NexQuant
1
0
Fork 0
mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-27 23:47:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: Update pydantic to 2.4.0 (CVE-2024-3772 fix)

Browse Source 
- Bump minimum version from 2.0.0 to 2.4.0
- Fixes ReDoS vulnerability via crafted email strings
- Dependabot alert #24
This commit is contained in:
TPTBusiness
2026-04-02 22:58:12 +02:00
parent b635839571
commit 44f50e55a9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rdagent/scenarios/rl/autorl_bench/requirements.txt
+1 -1
View File
@@ -19,7 +19,7 @@ vllm>=0.18.0 # Security fix: CVE-2026-22778 (RCE via JPEG2000 heap overflow) +
# Data processing
numpy>=1.26.0
pandas>=1.5.0
pydantic>=2.0.0
pydantic>=2.4.0 # Security fix: CVE-2024-3772 (ReDoS via crafted email)
# Models
torch>=2.6.0 # Security fix: CVE-2025-32434 (torch.load RCE with weights_only=True)