gavindiaz/NexQuant
1
0
Fork 0
mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-29 00:17:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: Update torch to 2.6.0 (CVE-2025-32434, CVE-2024-31580 fix)

Browse Source 
- Bump minimum version from 2.0.0 to 2.6.0
- Fixes CVE-2025-32434: RCE vulnerability in torch.load with weights_only=True
- Fixes CVE-2024-31580: Heap buffer overflow (DoS) in vararg_functions.cpp
- Dependabot alerts #40 and #26
This commit is contained in:
TPTBusiness
2026-04-02 22:51:31 +02:00
parent ee5b369fae
commit c1243da802
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rdagent/scenarios/rl/autorl_bench/requirements.txt
+1 -1
View File
@@ -12,7 +12,7 @@ opencompass==0.5.1
setuptools<75 # uv venv 不自带, opencompass 依赖 pkg_resources
# 推理加速（可选，TRL 支持 0.10.2-0.12.0）
vllm>=0.12.0
vllm>=0.18.0 # Security fix: CVE-2026-27893 (Hardcoded trust_remote_code RCE)
# 数据处理
numpy>=1.26.0