mirror of
https://github.com/snapotter-hq/SnapOtter.git
synced 2026-08-03 07:46:42 +02:00
SnapOtter
3b8d529b44
rembg 2.0.75 pulls in numpy>=2.3.0 which conflicts with our pinned numpy==1.26.4 and would break the entire AI dependency chain. The two rembg CVEs (SSRF + path traversal) are in its server/CLI components which we don't use; they're already in the pip-audit ignore list.
11 lines
224 B
Plaintext
11 lines
224 B
Plaintext
rembg[cpu]==2.0.62
|
|
realesrgan==0.3.0
|
|
paddleocr[doc-parser]>=3.4.0,<3.5.0
|
|
paddlepaddle>=3.0.0,<3.1.0
|
|
mediapipe>=0.10.21
|
|
onnxruntime==1.20.1
|
|
numpy==1.26.4
|
|
Pillow==12.2.0
|
|
opencv-python-headless==4.10.0.84
|
|
codeformer-pip==0.0.4
|