Bob Small

I am getting this error: node-pre-gyp ERR! Tried to download(404): https://github.com/kelektiv/node.bcrypt.js/releases/download/v1.0.3/bcrypt_lib-v1.0.3-node-v64-darwin-x64.tar.gz I checked with the Repo https://github.com/kelektiv/node.bcrypt.js the oldest one available for download is 2.0.0, the current release is 3.0.6,...

Looking at app.py under demo folder I see the following code: MAX_MAX_NEW_TOKENS = 2048 DEFAULT_MAX_NEW_TOKENS = 1024 MAX_INPUT_TOKEN_LENGTH = int(os.getenv("MAX_INPUT_TOKEN_LENGTH", "4096")) This could lead to an overflow issue. Implications This...

Requirements versions have known security vulerabilities

1

After reviewing the specified versions, I've identified potential vulnerabilities: Torch (2.0.1) CVE-2023-30570: A denial-of-service vulnerability in Torch's torch.nn.functional module. Severity: Medium Recommendation: Update to Torch 2.0.2 or later. Transformers (4.35.0)...