gavindiaz/NexQuant
1
0
Fork 0
mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-27 15:37:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: Add CVE-2026-22807 to vllm security fix comment

Browse Source 
- Update vllm comment to include auto_map RCE vulnerability
- Version >=0.18.0 fixes all three vllm CVEs:
  - CVE-2026-22778 (JPEG2000 heap overflow RCE)
  - CVE-2026-22807 (auto_map dynamic module RCE)
  - CVE-2026-27893 (trust_remote_code override)
This commit is contained in:
TPTBusiness
2026-04-02 22:54:29 +02:00
parent ba43e83ac1
commit 5881a3f776
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rdagent/scenarios/rl/autorl_bench/requirements.txt
+1 -1
View File
@@ -12,7 +12,7 @@ opencompass==0.5.1
setuptools<75 # uv venv 不自带, opencompass 依赖 pkg_resources
# 推理加速（可选，TRL 支持 0.10.2-0.12.0）
vllm>=0.18.0 # Security fix: CVE-2026-22778 (RCE via JPEG2000 heap overflow) + CVE-2026-27893
vllm>=0.18.0 # Security fix: CVE-2026-22778 (JPEG2000 RCE), CVE-2026-22807 (auto_map RCE), CVE-2026-27893 (trust_remote_code)
# 数据处理
numpy>=1.26.0