Security vulnerabilties: gradio and onnx

bmaltais / kohya_ss

Apache License 2.0

9.62k stars 1.24k forks source link

Security vulnerabilties: gradio and onnx #2663

Closed ashleykleynhans closed 3 months ago

ashleykleynhans commented 3 months ago

onnx security vulnerability

onnx 1.15.0 has the following security vulnerabilities:

CVE-2024-27318 (High severity)
CVE-2024-27319 (Moderate severity)

It should be upgraded to version 1.16.0 or 1.16.1

gradio security vulnerability

gradio 4.26.0 has the following security vulnerabilities:

CVE-2024-4941 (High severity)

It should be upgraded to version 4.36.0 or higher.

bmaltais commented 3 months ago

I will see if I can update those in both master and dev. I have been waiting a long time now to push an update from the dev branch… so in the mean time I could at least do that.

bmaltais commented 3 months ago

OK, new release with fix pushed.