From 71ddbe1a6468b6c583a2c1d14bd06d9388b28093 Mon Sep 17 00:00:00 2001 From: TPTBusiness Date: Thu, 2 Apr 2026 22:52:29 +0200 Subject: [PATCH] chore: Update vllm security fix comment (CVE-2026-22778) --- rdagent/scenarios/rl/autorl_bench/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rdagent/scenarios/rl/autorl_bench/requirements.txt b/rdagent/scenarios/rl/autorl_bench/requirements.txt index bff0fe34..c2bd1067 100644 --- a/rdagent/scenarios/rl/autorl_bench/requirements.txt +++ b/rdagent/scenarios/rl/autorl_bench/requirements.txt @@ -12,7 +12,7 @@ opencompass==0.5.1 setuptools<75 # uv venv 不自带, opencompass 依赖 pkg_resources # 推理加速（可选，TRL 支持 0.10.2-0.12.0） -vllm>=0.18.0 # Security fix: CVE-2026-27893 (Hardcoded trust_remote_code RCE) +vllm>=0.18.0 # Security fix: CVE-2026-22778 (RCE via JPEG2000 heap overflow) + CVE-2026-27893 # 数据处理 numpy>=1.26.0