From 8fae770090711b7b013681f6310b577cdddb0793 Mon Sep 17 00:00:00 2001
From: Jing Shan <jingsh@users.noreply.github.com>
Date: Tue, 18 Feb 2025 13:53:24 -0500
Subject: [PATCH] [oncall] Fix vulnerability in the transformers dependency

CVE-2024-11394
References
https://nvd.nist.gov/vuln/detail/CVE-2024-11394
https://www.zerodayinitiative.com/advisories/ZDI-24-1515 https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2024-229.yaml GHSA-hxxf-235m-72v3
---
 examples/dynamo/requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/examples/dynamo/requirements.txt b/examples/dynamo/requirements.txt
index 196fd6c762..f90c80aa8a 100644
--- a/examples/dynamo/requirements.txt
+++ b/examples/dynamo/requirements.txt
@@ -1,8 +1,8 @@
 cupy==13.1.0
 triton==2.3.0
 diffusers==0.30.3
-transformers==4.44.2
+transformers==4.48.0
 matplotlib
 pandas
 huggingface_hub
-opencv-python
\ No newline at end of file
+opencv-python