From 7f661fe38fdcacf7105b5c51db5fb87252a3170d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 16 Jan 2025 05:50:09 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400820
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400822
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400823
---
 requirements.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements.txt b/requirements.txt
index ad0f6f905..52cb6d24b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,3 +17,4 @@ boto3
 langchain-openai
 langchain-community
 langchain-google-genai
+transformers>=4.48.0 # not directly required, pinned by Snyk to avoid a vulnerability