2026-06-21 23:24:10 +08:00
|
|
|
# rembg is pinned to 2.0.69. The patched 2.0.75 (GHSA: server SSRF/CORS +
|
|
|
|
|
# custom-model path traversal) pulls numpy>=2.3, scipy>=1.16 and
|
|
|
|
|
# scikit-image>=0.26 -- a numpy 2.x closure that is incompatible with this
|
|
|
|
|
# numpy==1.26.4-locked stack (realesrgan 0.3.0 and codeformer-pip 0.0.4 break
|
|
|
|
|
# on numpy 2.x). Both advisories are unreachable here: rembg is used purely as
|
|
|
|
|
# a library (we never run `rembg s`), and new_session() only ever receives
|
|
|
|
|
# allowlisted model names (remove_bg.py ALLOWED_MODELS), never user paths.
|
2026-06-21 12:52:27 +08:00
|
|
|
rembg==2.0.69
|
2026-04-05 19:12:45 +08:00
|
|
|
realesrgan==0.3.0
|
2026-06-09 23:18:02 +08:00
|
|
|
mediapipe>=0.10.21
|
2026-04-05 19:12:45 +08:00
|
|
|
onnxruntime-gpu==1.20.1
|
|
|
|
|
numpy==1.26.4
|
2026-07-13 19:27:16 +08:00
|
|
|
Pillow==12.3.0
|
2026-04-27 01:23:25 +08:00
|
|
|
opencv-python-headless==4.10.0.84
|
2026-04-13 21:56:59 +08:00
|
|
|
codeformer-pip==0.0.4
|
2026-06-24 17:27:59 +08:00
|
|
|
|
|
|
|
|
# OpenTelemetry: enables the innermost sidecar.<script> span when
|
|
|
|
|
# OTEL_EXPORTER_OTLP_ENDPOINT is set (enterprise distributed_tracing). Pure-Python,
|
|
|
|
|
# no numpy/scipy deps, so safe for the numpy==1.26.4-locked stack.
|
2026-07-08 13:11:46 +08:00
|
|
|
opentelemetry-api==1.28.2
|
|
|
|
|
opentelemetry-sdk==1.28.2
|
|
|
|
|
opentelemetry-exporter-otlp-proto-http==1.28.2
|
|
|
|
|
|
|
|
|
|
# Keep protobuf on a patched 5.x release. OpenTelemetry 1.27.x pinned
|
|
|
|
|
# opentelemetry-proto to protobuf<5, which left the resolver on vulnerable
|
|
|
|
|
# protobuf 4.25.9 (PYSEC-2026-1805).
|
|
|
|
|
protobuf==5.29.6
|
