gavindiaz/NexQuant
1
0
Fork 0
mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-28 07:57:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(deps): bump setuptools >=78.1.1 to fix GHSA-8g6x-3r52-4m6c

Browse Source
This commit is contained in:
TPTBusiness
2026-04-29 16:20:35 +02:00
parent bc96d26371
commit 9947ea3928
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rdagent/scenarios/rl/autorl_bench/requirements.txt
+1 -1
View File
@@ -9,7 +9,7 @@ peft>=0.18.1
# Evaluation
opencompass==0.5.1
setuptools<75 # uv venv doesn't include, opencompass depends on pkg_resources
setuptools>=78.1.1 # Security fix: GHSA-8g6x-3r52-4m6c (path traversal in PackageIndex.download, arbitrary file write/RCE)
# Inference acceleration (optional, TRL supports 0.10.2-0.12.0)
# Security: Version >=0.14.0 fixes CVE-2026-22807 (RCE via auto_map dynamic module loading)