From e1cde63fb601c8fa567fb4fcec5ade2693a77ef3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 11 Jun 2025 02:51:41 +0000 Subject: [PATCH] fix: requirements/requirements_torch.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-10305723 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-9634167 --- requirements/requirements_torch.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements/requirements_torch.txt b/requirements/requirements_torch.txt index 6737ebd0..b59af7ae 100644 --- a/requirements/requirements_torch.txt +++ b/requirements/requirements_torch.txt @@ -2,7 +2,8 @@ matplotlib>=3.5.2 opencv-python pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability tensorboard -torch>=1.12.0 +torch>=2.7.1 torchvision>=0.13.0 werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability +requests>=2.32.4 # not directly required, pinned by Snyk to avoid a vulnerability