mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-27 23:47:46 +00:00
chore: Update transformers to 4.48.0 (CVE-2024-11393 fix)
- Bump minimum version from 4.40.0 to 4.48.0 - Fixes Deserialization of Untrusted Data RCE vulnerability - Dependabot alert #29
This commit is contained in:
@@ -21,7 +21,7 @@ pydantic>=2.0.0
|
||||
|
||||
# 模型
|
||||
torch>=2.0.0
|
||||
transformers>=4.40.0
|
||||
transformers>=4.48.0 # Security fix: CVE-2024-11393 (Deserialization RCE)
|
||||
huggingface_hub>=0.20.0
|
||||
|
||||
# Web 服务
|
||||
|
||||
Reference in New Issue
Block a user