From ec33821cc63cd32b02257af854ad3191e0f79253 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 9 Jan 2026 04:22:25 +0000
Subject: [PATCH] fix: requirements/requirements_furhat.txt to reduce
 vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TORCH-13052805
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210
---
 requirements/requirements_furhat.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements/requirements_furhat.txt b/requirements/requirements_furhat.txt
index 9452fbc..3e5b011 100644
--- a/requirements/requirements_furhat.txt
+++ b/requirements/requirements_furhat.txt
@@ -2,7 +2,7 @@
 # Based on multimodal emotion inference with Furhat Remote API integration
 
 # Core ML and AI packages
-torch>=1.9.0
+torch>=2.9.0
 torchvision>=0.10.0
 transformers>=4.20.0
 scikit-learn>=1.0.0
@@ -34,3 +34,4 @@ json
 time
 os
 sys
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability