From 15c62b603569882bd516a9b8192b70676c6659e4 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 7 Apr 2026 07:38:10 +0000 Subject: [PATCH] fix: onnxruntime/python/tools/transformers/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ONNX-15870164 - https://snyk.io/vuln/SNYK-PYTHON-ONNX-15873763 - https://snyk.io/vuln/SNYK-PYTHON-ONNX-15873848 - https://snyk.io/vuln/SNYK-PYTHON-ONNX-15873849 - https://snyk.io/vuln/SNYK-PYTHON-ONNX-15873851 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-15166618 --- onnxruntime/python/tools/transformers/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/onnxruntime/python/tools/transformers/requirements.txt b/onnxruntime/python/tools/transformers/requirements.txt index a299aa2374489..77007d1638eb1 100644 --- a/onnxruntime/python/tools/transformers/requirements.txt +++ b/onnxruntime/python/tools/transformers/requirements.txt @@ -1,11 +1,11 @@ -onnx >= 1.8 +onnx>=1.21.0 numpy coloredlogs psutil py-cpuinfo py3nvml packaging -transformers >= 4.0 +transformers>=5.0.0rc3 scipy sentencepiece