From e48fecb3392a07780f9fa5dcbfc9ee8c9a2b7e69 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 20 Sep 2025 08:26:49 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-12668722 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-12670879 --- requirements.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index eec74ac..8df5962 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,4 +7,5 @@ qdrant-client==1.9.0 sentence-transformers==2.2.2 openai==1.11.1 numpy==1.26.4 -huggingface_hub<0.26.0 \ No newline at end of file +huggingface_hub<0.26.0 +transformers>=4.53.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file