gavindiaz/NexQuant
1
0
Fork 0
mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-08-04 18:57:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: Update torch to 2.6.0 (CVE-2025-32434 fix)

Browse Source 
- Bump minimum version from 2.0.0 to 2.6.0
- Fixes RCE vulnerability in torch.load with weights_only=True
- Dependabot alert #40
This commit is contained in:
TPTBusiness
2026-04-02 22:51:13 +02:00
parent 46720b30b6
commit e25da63862
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rdagent/scenarios/rl/autorl_bench/requirements.txt
+1 -1
View File
@@ -20,7 +20,7 @@ pandas>=1.5.0
pydantic>=2.0.0
# 模型
torch>=2.0.0
torch>=2.6.0 # Security fix: CVE-2025-32434 (torch.load RCE with weights_only=True)
transformers>=4.48.0 # Security fix: CVE-2024-11393 (Deserialization RCE)
huggingface_hub>=0.20.0