From 35e2a4beaff76270a76063e4d95fdd9f6feec61d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 28 Jan 2026 13:58:03 +0000 Subject: [PATCH] fix: backend/oasst_backend/utils/topic_model_requirments.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SENTENCEPIECE-15091567 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-10332644 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-10332645 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-15123585 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-15053866 --- backend/oasst_backend/utils/topic_model_requirments.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/backend/oasst_backend/utils/topic_model_requirments.txt b/backend/oasst_backend/utils/topic_model_requirments.txt index 4941d144ad..3ca0d3c410 100644 --- a/backend/oasst_backend/utils/topic_model_requirments.txt +++ b/backend/oasst_backend/utils/topic_model_requirments.txt @@ -2,3 +2,6 @@ pandas sentence-transformers bertopic scipy +sentencepiece>=0.2.1 # not directly required, pinned by Snyk to avoid a vulnerability +torch>=2.10.0 # not directly required, pinned by Snyk to avoid a vulnerability +wheel>=0.46.2 # not directly required, pinned by Snyk to avoid a vulnerability