fix: upgrade transformers to 4.53.0 to address security vulnerabilities

weklund · weklund · commit c33c32576cb1 · 2026-01-26T16:27:57.000-05:00
Addresses 9 Dependabot security alerts (CVEs) related to ReDoS and
input validation vulnerabilities in the transformers package.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,6 +11,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### **Changed**
 
+- update transformers to 4.53.0 to address security vulnerabilities
+
 ## v3.2.1
 
 ### **Added**
diff --git a/modules/sagemaker/sagemaker-templates/templates/finetune_llm_evaluation/seed_code/build_app/source_scripts/requirements.txt b/modules/sagemaker/sagemaker-templates/templates/finetune_llm_evaluation/seed_code/build_app/source_scripts/requirements.txt
@@ -1,4 +1,4 @@
-transformers[accelerate]==4.50.0
+transformers[accelerate]==4.53.0
 torch>=2.0.0
 peft==0.4.0
 bitsandbytes==0.40.2
