From 39daccc7e7fa7112de11b961f75dad32320577bd Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 20 Mar 2026 14:22:55 +0000 Subject: [PATCH] fix: tools/ci_build/github/linux/docker/scripts/training/ortmodule/stage2/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PYASN1-15674561 --- .../docker/scripts/training/ortmodule/stage2/requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/tools/ci_build/github/linux/docker/scripts/training/ortmodule/stage2/requirements.txt b/tools/ci_build/github/linux/docker/scripts/training/ortmodule/stage2/requirements.txt index 59121cbe7b5da..00f2647983f7d 100644 --- a/tools/ci_build/github/linux/docker/scripts/training/ortmodule/stage2/requirements.txt +++ b/tools/ci_build/github/linux/docker/scripts/training/ortmodule/stage2/requirements.txt @@ -8,3 +8,4 @@ wget pytorch-lightning==1.6.0 deepspeed==0.3.15 fairscale==0.4.6 +pyasn1>=0.6.3 # not directly required, pinned by Snyk to avoid a vulnerability