External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): revert rembg to 2.0.62 (2.0.75 requires numpy>=2.3)

Browse Source 
rembg 2.0.75 pulls in numpy>=2.3.0 which conflicts with our pinned
numpy==1.26.4 and would break the entire AI dependency chain. The two
rembg CVEs (SSRF + path traversal) are in its server/CLI components
which we don't use; they're already in the pip-audit ignore list.
This commit is contained in:
SnapOtter
2026-06-10 21:21:39 +08:00
parent 8792080982
commit 3b8d529b44
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/ai/python/requirements-gpu.txt
+1 -1
View File
@@ -1,4 +1,4 @@
rembg==2.0.75
rembg==2.0.62
realesrgan==0.3.0
paddleocr==2.9.1
paddlepaddle-gpu==3.0.0
packages/ai/python/requirements.txt
+1 -1
View File
@@ -1,4 +1,4 @@
rembg[cpu]==2.0.75
rembg[cpu]==2.0.62
realesrgan==0.3.0
paddleocr[doc-parser]>=3.4.0,<3.5.0
paddlepaddle>=3.0.0,<3.1.0