Fix CVE issues

Signed-off-by: Nathalie Jonathan <nathhjo@amazon.com>
nathaliellenaa · Feb 5, 2025 · a8427fb · a8427fb
1 parent b26ea1e
commit a8427fb
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 4 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -68,6 +68,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - fix lint issues on main by @rawwar in ([#374](https://github.com/opensearch-project/opensearch-py-ml/pull/374))
 - fix CVE vulnerability by @rawwar in ([#383](https://github.com/opensearch-project/opensearch-py-ml/pull/383))
 - refactor: replace 'payload' with 'body' in `create_standalone_connector` by @yerzhaisang ([#424](https://github.com/opensearch-project/opensearch-py-ml/pull/424))
+- Fix CVE vulnerability by @nathaliellenaa in ([#438](https://github.com/opensearch-project/opensearch-py-ml/pull/438))
 
 ## [1.1.0]
 

diff --git a/requirements-dev.txt b/requirements-dev.txt
@@ -5,12 +5,12 @@ pandas>=1.5.2,<2.3,!=2.1.0
 matplotlib>=3.6.2,<4
 numpy>=1.24.0,<2
 opensearch-py>=2.2.0
-torch>=2.0.1,<2.1.0
+torch>=2.5.0
 onnx>=1.15.0
 accelerate>=0.27
 sentence_transformers>=2.5.0,<2.6
 tqdm>4.66.0,<5
-transformers>=4.36.0,<5
+transformers>=4.47.0,<5
 deprecated>=1.2.14,<2
 mdutils>=1.6.0,<2
 pillow>10.0.0,<11

diff --git a/requirements.txt b/requirements.txt
@@ -5,10 +5,10 @@ pandas>=1.5.2,<2.3,!=2.1.0
 matplotlib>=3.6.2,<4
 numpy>=1.24.0,<2
 opensearch-py>=2.2.0
-torch>=2.0.1,<2.1.0
+torch>=2.5.0
 onnx>=1.15.0
 accelerate>=0.27
 sentence_transformers>=2.5.0,<2.6
 tqdm>4.66.0,<5
-transformers>=4.36.0,<5
+transformers>=4.47.0,<5
 deprecated>=1.2.14,<2