From 96408e3b6e80c79d91e9d450c7917b5127a6f816 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 14 Aug 2025 09:30:08 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TORCH-9726944
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-11501199
---
 requirements.txt | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/requirements.txt b/requirements.txt
index bd954e1..07244ab 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,3 +4,5 @@ langchain-community
 textblob
 sentence_transformers
 validators
+torch>=2.8.0 # not directly required, pinned by Snyk to avoid a vulnerability
+transformers>=4.53.0 # not directly required, pinned by Snyk to avoid a vulnerability