fix(customizer): address CVEs in unsloth and automodel

docker/Dockerfile.nmp-automodel-base

@@ -95,13 +95,17 @@ RUN --mount=type=cache,target=/root/.cache/uv \
     "black>=26.3.1,<27" \
     "GitPython>=3.1.50,<4" \
     "jaraco-context>=6.1.0,<7" \
-    "jupyter-server>=2.18.0,<3" \
+    "jupyter-server>=2.20.0,<3" \
     "jupyterlab>=4.5.7,<5" \
     "mistune>=3.2.1,<4" \
     "notebook>=7.5.6,<8" \
     "onnx>=1.21.0,<2" \
     "pillow>=12.2.0,<13" \
     "pyasn1>=0.6.3,<1" \
+    "pyarrow>=23.0.1,<24" \
+    "msgpack>=1.2.1,<2" \
+    "cryptography>=48.0.1,<49" \
+    "wandb>=0.27.2,<1" \
     "tornado>=6.5.5,<7" \
     "urllib3>=2.7.0,<3" \
     "mlflow-skinny>=3.11.1,<3.12.0" \
@@ -119,6 +123,10 @@ COPY --from=ghcr.io/astral-sh/uv:0.9.14 /uv /bin/uv
 # Stale copies under NGC system site-packages (verified on nvcr.io/nvidia/pytorch:26.05-py3).
 # CVE scanners read dist-packages even when --system-site-packages resolves imports from /opt/venv.
 # rm -rf (not pip uninstall) avoids corrupted dist-info RECORDs on the NGC base image.
+RUN apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --only-upgrade openssl libssl3t64 && \
+    rm -rf /var/lib/apt/lists/*
+
 RUN rm -rf \
     /usr/local/lib/python3.12/dist-packages/aiohttp \
     /usr/local/lib/python3.12/dist-packages/aiohttp-*.dist-info \
@@ -141,7 +149,9 @@ RUN rm -rf \
     /usr/local/lib/python3.12/dist-packages/wandb-*.dist-info \
     /usr/local/lib/python3.12/dist-packages/mlflow \
     /usr/local/lib/python3.12/dist-packages/mlflow-*.dist-info \
-    /usr/local/lib/python3.12/dist-packages/mlflow_skinny-*.dist-info
+    /usr/local/lib/python3.12/dist-packages/mlflow_skinny-*.dist-info \
+    /usr/local/lib/python3.12/dist-packages/jupyter_server \
+    /usr/local/lib/python3.12/dist-packages/jupyter_server-*.dist-info
 
 ENV VIRTUAL_ENV=/opt/venv \
     UV_PROJECT_ENVIRONMENT=/opt/venv \

docker/Dockerfile.nmp-automodel-training

@@ -40,7 +40,6 @@ RUN --mount=type=cache,target=/root/.cache/uv \
     uv pip install --python ${VIRTUAL_ENV}/bin/python --no-cache --no-deps \
     -e /opt/Automodel
 
-
 ENV PATH="${VIRTUAL_ENV}/bin:${PATH}"
 ENTRYPOINT ["/opt/venv/bin/python"]
 CMD ["-m", "nmp.automodel.tasks.training", "--help"]

docker/Dockerfile.nmp-unsloth-training

@@ -179,6 +179,10 @@ RUN --mount=type=cache,target=/root/.cache/uv \
     "mlflow-skinny>=3.11.1,<3.12.0"
 
 # Stale NGC system site-packages (verified on nvcr.io/nvidia/pytorch:26.05-py3).
+RUN apt-get update && \
+    DEBIAN_FRONTEND=noninteractive apt-get install -y --only-upgrade openssl libssl3t64 && \
+    rm -rf /var/lib/apt/lists/*
+
 RUN rm -rf \
     /usr/local/lib/python3.12/dist-packages/aiohttp \
     /usr/local/lib/python3.12/dist-packages/aiohttp-*.dist-info \
@@ -199,7 +203,9 @@ RUN rm -rf \
     /usr/local/lib/python3.12/dist-packages/wandb-*.dist-info \
     /usr/local/lib/python3.12/dist-packages/mlflow \
     /usr/local/lib/python3.12/dist-packages/mlflow-*.dist-info \
-    /usr/local/lib/python3.12/dist-packages/mlflow_skinny-*.dist-info
+    /usr/local/lib/python3.12/dist-packages/mlflow_skinny-*.dist-info \
+    /usr/local/lib/python3.12/dist-packages/jupyter_server \
+    /usr/local/lib/python3.12/dist-packages/jupyter_server-*.dist-info
 
 ENTRYPOINT ["/opt/venv/bin/python"]
 CMD ["-m", "nmp.unsloth.tasks.training", "--help"]

pyproject.toml

@@ -264,7 +264,7 @@ constraint-dependencies = [
   "cryptography>=46.0.7",
   "diffusers>=0.38.0",
   "filelock>=3.20.3",
-  "jupyter-server>=2.18.0",
+  "jupyter-server>=2.20.0",
   "jupyterlab>=4.5.7",
   "langchain-community>=0.3.31,<0.4",     # 0.4.x removes the vertexai import path used by ragas 0.4.3
   "langchain-core>=1.4.8",
@@ -276,6 +276,7 @@ constraint-dependencies = [
   "litellm>=1.83.10",
   "lxml>=6.1.0",
   "mistune>=3.2.1",
+  "msgpack>=1.2.1",
   "nbconvert>=7.17.1",
   "nltk>=3.9.4",
   "pillow>=12.2.0",
@@ -320,7 +321,7 @@ override-dependencies = [
   "ujson>=5.12.0",           # High – nmp-api/cpu-tasks/gpu-tasks
   "xgrammar>=0.1.32",        # High – customizer + nmp-gpu-tasks
   "fastmcp>=3.2.0",          # GHSA-vv7q-7jx5-f767 (Critical) + GHSA-rww4-4w9c-7733 (High); overrides vendored sdk/python/nemo-platform <3 constraint
-  "wandb>=0.25.1",           # CVE-2026-33186
+  "wandb>=0.27.2",           # wandb-core Go CVEs (nspect); integrations extra
   "click>=8.2.0",            # Below CVEs are based on constraints that garak has
   "langchain-openai>=1.3.3",
   "litellm>=1.83.10",        # CVE-2026-42208 (Critical SQL injection), CVE-2026-40217, and 5 other High CVEs