Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
build(depend): bump spacy-transformers to 1.3.4 closed megagonlabs#12
Why === transformers have Critical severity vulnerability. [transformers has a Deserialization of Untrusted Data vulnerability · CVE-2023-6730 · GitHub Advisory Database](GHSA-3863-2447-669p) It is patched in `transformers v4.36.0`. `spacy-transformers v1.3.4` use `transformers v4.36.0`. [Release v1.3.4 · explosion/spacy-transformers](https://github.com/explosion/spacy-transformers/releases/tag/v1.3.4)
- Loading branch information