From 3e83f8577fbb306741985a550034e6f26ee72229 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 2 Oct 2025 10:59:13 +0000 Subject: [PATCH] fix: requirements-cpu.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052818 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052821 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052968 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052977 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052994 --- requirements-cpu.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-cpu.txt b/requirements-cpu.txt index 27ca8ca5dbc5..9f6fb9a2f7db 100644 --- a/requirements-cpu.txt +++ b/requirements-cpu.txt @@ -2,5 +2,5 @@ -r requirements-common.txt # Dependencies for x86_64 CPUs -torch == 2.4.0+cpu; platform_machine != "ppc64le" +torch==2.8.0+cpu; platform_machine != "ppc64le" torchvision; platform_machine != "ppc64le" # required for the image processor of phi3v, this must be updated alongside torch