From 875d6e5ea9a97463dca87f7253397342c0507e31 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 31 Mar 2026 11:35:21 +0000 Subject: [PATCH] fix: onnxruntime/python/tools/transformers/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ONNX-10877916 - https://snyk.io/vuln/SNYK-PYTHON-ONNX-15674461 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-15763443 --- onnxruntime/python/tools/transformers/requirements.txt | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/onnxruntime/python/tools/transformers/requirements.txt b/onnxruntime/python/tools/transformers/requirements.txt index a299aa2374489..afaa797c29cb0 100644 --- a/onnxruntime/python/tools/transformers/requirements.txt +++ b/onnxruntime/python/tools/transformers/requirements.txt @@ -1,4 +1,4 @@ -onnx >= 1.8 +onnx>=1.21.0 numpy coloredlogs psutil @@ -10,4 +10,5 @@ scipy sentencepiece # please follow https://pytorch.org/ to install PyTorch for your OS -torch >= 1.8 \ No newline at end of file +torch >= 1.8 +requests>=2.33.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file