semantica

mengzhx/semantica

Fork 0

mirror of https://github.com/semantica-agi/semantica.git synced 2026-09-09 04:00:52 +00:00

Author	SHA1	Message	Date
Zohaib Hassnain	42bbe51382	fix(ci): ignore upstream accelerate vulnerability in security scan (#1540 ) Add GHSA-4j2p-28q2-5m79 to IGNORED_VULN_IDS in security-scan.yml. accelerate<=1.14.0 has an open path traversal advisory (GHSA-4j2p-28q2-5m79) in load_checkpoint_in_model. 1.14.0 is currently the latest available release on PyPI, so no upstream patch exists yet. Semantica does not expose or call sharded checkpoint loading, making this non-actionable. Re-evaluate once an updated accelerate release is published.	2026-09-09 05:48:45 +05:00

Author

SHA1

Message

Date

Zohaib Hassnain

42bbe51382

fix(ci): ignore upstream accelerate vulnerability in security scan (#1540 )

Add GHSA-4j2p-28q2-5m79 to IGNORED_VULN_IDS in security-scan.yml.

accelerate<=1.14.0 has an open path traversal advisory (GHSA-4j2p-28q2-5m79) in load_checkpoint_in_model. 1.14.0 is currently the latest available release on PyPI, so no upstream patch exists yet. Semantica does not expose or call sharded checkpoint loading, making this non-actionable. Re-evaluate once an updated accelerate release is published.

2026-09-09 05:48:45 +05:00

Compare commits

Diff Content Not Available