slslslrhfem commited on
Commit
13d5fc5
·
1 Parent(s): c2fe02d

fix: bump torch/torchaudio to 2.6.0 (CVE-2025-32434 mitigation)

Browse files

torch 2.5.1 is rejected by transformers/lightning torch.load safety
check due to CVE-2025-32434. 2.6.0 is the minimum patched version and
still uses CUDA 12.4 wheels (libcudart.so.12), staying compatible with
the HF Space base image.

Files changed (1) hide show
  1. requirements.txt +2 -2
requirements.txt CHANGED
@@ -1,7 +1,7 @@
1
  https://github.com/CPJKU/beat_this/archive/main.zip
2
  gradio>=4.0.0
3
- torch==2.5.1
4
- torchaudio==2.5.1
5
  pytorch-lightning>=2.0.0
6
  transformers>=4.46.0
7
  huggingface_hub>=0.25.0,<1.0.0
 
1
  https://github.com/CPJKU/beat_this/archive/main.zip
2
  gradio>=4.0.0
3
+ torch==2.6.0
4
+ torchaudio==2.6.0
5
  pytorch-lightning>=2.0.0
6
  transformers>=4.46.0
7
  huggingface_hub>=0.25.0,<1.0.0