From a9e34b2f96fe1e605cd2152768b9f2a5d0292810 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 19 Jun 2025 00:22:37 +0000 Subject: [PATCH] fix: requirements_versions.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902 --- requirements_versions.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements_versions.txt b/requirements_versions.txt index e84bd4270a8..18f77706fe9 100644 --- a/requirements_versions.txt +++ b/requirements_versions.txt @@ -30,3 +30,4 @@ torchdiffeq==0.2.3 torchsde==0.2.5 transformers==4.30.2 httpx==0.24.1 +protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability