mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-27 23:47:46 +00:00
chore: Update vllm security fix comment (CVE-2026-22778)
This commit is contained in:
@@ -12,7 +12,7 @@ opencompass==0.5.1
|
||||
setuptools<75 # uv venv 不自带, opencompass 依赖 pkg_resources
|
||||
|
||||
# 推理加速(可选,TRL 支持 0.10.2-0.12.0)
|
||||
vllm>=0.18.0 # Security fix: CVE-2026-27893 (Hardcoded trust_remote_code RCE)
|
||||
vllm>=0.18.0 # Security fix: CVE-2026-22778 (RCE via JPEG2000 heap overflow) + CVE-2026-27893
|
||||
|
||||
# 数据处理
|
||||
numpy>=1.26.0
|
||||
|
||||
Reference in New Issue
Block a user