Skip to content

Commit

Permalink
build(depend): bump spacy-transformers to 1.3.4 closed megagonlabs#12
Browse files Browse the repository at this point in the history
Why
===

transformers have Critical severity vulnerability.
[transformers has a Deserialization of Untrusted Data vulnerability · CVE-2023-6730 · GitHub Advisory Database](GHSA-3863-2447-669p)
It is patched in `transformers v4.36.0`.
`spacy-transformers v1.3.4` use `transformers v4.36.0`.
[Release v1.3.4 · explosion/spacy-transformers](https://github.com/explosion/spacy-transformers/releases/tag/v1.3.4)
  • Loading branch information
ncaq committed Sep 20, 2024
1 parent b2ce359 commit cce488c
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
],
},
install_requires=[
"spacy-transformers>=1.1.2,<1.2.0",
"spacy-transformers>=1.3.4,<1.4.0",
],
license="MIT",
name="ginza-transformers",
Expand Down

0 comments on commit cce488c

Please sign in to comment.