From 4cac90fcefd2c12d9694897d1275b53442c033f3 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 9 Jan 2026 02:54:00 +0000
Subject: [PATCH] fix: requirements/requirements_multimodal.txt to reduce
 vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052805
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210
---
 requirements/requirements_multimodal.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements/requirements_multimodal.txt b/requirements/requirements_multimodal.txt
index f760f30..47e8564 100644
--- a/requirements/requirements_multimodal.txt
+++ b/requirements/requirements_multimodal.txt
@@ -2,7 +2,7 @@
 # Combines FER (camera) and TER (voice) functionality
 
 # Core ML and Deep Learning
-torch>=2.0.0
+torch>=2.9.0
 torchvision>=0.10.0
 transformers>=4.21.0
 scikit-learn>=1.0.0
@@ -50,3 +50,4 @@ collections  # Built-in with Python
 # macOS users:
 # brew install portaudio
 # pip install pyaudio
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability