Skip to content

Vulnerability Issue in set-fit=1.0.3 #610

@anjibabupalla

Description

@anjibabupalla

We have trained a model using
setfit==1.0.3, nltk==3.8.1, jinja2==3.1.3,openpyxl, huggingface_hub==0.23.5,chardet
and then loading the model
huggingface_hub==0.23.5,setfit==1.0.3,sentence_transformers==2.2.2 which install dependency transformers==4.42.0

The transformers ==4.42.0 has vulnerability issues and we tried to upgrade

huggingface_hub==0.33.4 and sentence_transformers==5.0.0 which automatically upgrades transformers==4.53.2

but we get so many errors the initial starting one

from huggingface_hub import CardData, DatasetFilter, ModelCard, dataset_info, list_datasets, model_info
ImportError: cannot import name 'DatasetFilter' from 'huggingface_hub'

Not sure how to fix this version incompatibilities and vulnerabilities. Any help is much appreciated.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions