chore: Update transformers to 4.48.0 (CVE-2024-11393 fix)

- Bump minimum version from 4.40.0 to 4.48.0
- Fixes Deserialization of Untrusted Data RCE vulnerability
- Dependabot alert #29
This commit is contained in:
TPTBusiness
2026-04-02 22:50:10 +02:00
parent 194844a524
commit 46720b30b6
@@ -21,7 +21,7 @@ pydantic>=2.0.0
# 模型
torch>=2.0.0
transformers>=4.40.0
transformers>=4.48.0 # Security fix: CVE-2024-11393 (Deserialization RCE)
huggingface_hub>=0.20.0
# Web 服务