holmes-extractor icon indicating copy to clipboard operation
holmes-extractor copied to clipboard

Plans to update Holmes dependencies?

Open dnicodemus opened this issue 5 months ago • 0 comments

Hi,

Are there any plans to update the Holmes dependencies?

Currently it requires Spacy >=3.0.0,<3.6.0 but these versions of Spacy requires transforms which are affected by vulnerabilities CVE-2023-7018 and CVE-2023-6730.

I would like to include Holmes in a side care, but am currently unable to do so because of these vulnerabilities.

Thanks for any support or advice.

Dave N

dnicodemus avatar Feb 23 '24 19:02 dnicodemus