chore: Update vllm security fix comment (CVE-2026-22778)

This commit is contained in:
TPTBusiness
2026-04-02 22:52:29 +02:00
parent 56176a581e
commit 71ddbe1a64
@@ -12,7 +12,7 @@ opencompass==0.5.1
setuptools<75 # uv venv 不自带, opencompass 依赖 pkg_resources
# 推理加速(可选,TRL 支持 0.10.2-0.12.0
vllm>=0.18.0 # Security fix: CVE-2026-27893 (Hardcoded trust_remote_code RCE)
vllm>=0.18.0 # Security fix: CVE-2026-22778 (RCE via JPEG2000 heap overflow) + CVE-2026-27893
# 数据处理
numpy>=1.26.0