gavindiaz/NexQuant
1
0
Fork 0
mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-29 08:27:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: Update transformers to 4.53.0 (CVE-2025-6051 fix)

Browse Source 
- Upgrade transformers from >=4.52.1 to >=4.53.0
- Fixes CVE-2025-6051: ReDoS in EnglishNormalizer.normalize_numbers()
- Crafted numeric strings can cause excessive CPU consumption
- Affects text-to-speech and number normalization tasks

Fixes Dependabot Alert #42
This commit is contained in:
TPTBusiness
2026-04-02 22:59:56 +02:00
parent afbce03551
commit 5bbe631eb5
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rdagent/scenarios/rl/autorl_bench/requirements.txt
+1 -1
View File
@@ -23,7 +23,7 @@ pydantic>=2.4.0 # Security fix: CVE-2024-3772 (ReDoS via crafted email)
# Models
torch>=2.6.0 # Security fix: CVE-2025-32434 (torch.load RCE with weights_only=True)
transformers>=4.52.1 # Security: CVE-2024-11393 (RCE) + CVE-2025-3264/3933/2099 (ReDoS)
transformers>=4.53.0 # Security fix: CVE-2024-11393 (RCE), CVE-2025-3264/3933/2099/6051 (ReDoS)
huggingface_hub>=0.20.0
# Web services