From 79c47eaba56a7633d54177a9c273d2cd4648bd6e Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 13 Aug 2025 21:17:10 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TORCH-9726944
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-11501199
---
 requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index d897bc6a..90ae958f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,5 @@
 timm==0.4.12
-transformers==4.15.0
+transformers==4.53.0
 fairscale==0.4.4
 pycocoevalcap
+torch>=2.8.0 # not directly required, pinned by Snyk to avoid a vulnerability