From a4fb019210764ee21ac13cc1906f2cc326200b25 Mon Sep 17 00:00:00 2001 From: zaristei2 Date: Tue, 3 Feb 2026 00:02:39 -0800 Subject: [PATCH] Patch aiohttp for CVE-2025-69223 (#33621) Signed-off-by: Zachary Aristei Co-authored-by: Zachary Aristei --- requirements/common.txt | 2 +- requirements/rocm-test.txt | 2 +- requirements/test.txt | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements/common.txt b/requirements/common.txt index 365e30ed4e44..bc170d90b6d2 100644 --- a/requirements/common.txt +++ b/requirements/common.txt @@ -11,7 +11,7 @@ transformers >= 4.56.0, < 5 tokenizers >= 0.21.1 # Required for fast incremental detokenization. protobuf # Required by LlamaTokenizer, gRPC. fastapi[standard] >= 0.115.0 # Required by FastAPI's form models in the OpenAI API server's audio transcriptions endpoint. -aiohttp +aiohttp >= 3.13.3 openai >= 1.99.1 # For Responses API with reasoning content pydantic >= 2.12.0 prometheus_client >= 0.18.0 diff --git a/requirements/rocm-test.txt b/requirements/rocm-test.txt index 835d8b183e4b..26c283852704 100644 --- a/requirements/rocm-test.txt +++ b/requirements/rocm-test.txt @@ -14,7 +14,7 @@ pytest-shard==0.1.2 # Async/HTTP dependencies anyio==4.6.2.post1 # via httpx, starlette -aiohttp==3.13.0 +aiohttp==3.13.3 # via gpt-oss httpx==0.27.2 # HTTP testing diff --git a/requirements/test.txt b/requirements/test.txt index 97f580848ba5..f72df06a0a75 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -12,7 +12,7 @@ affine==2.4.0 # via rasterio aiohappyeyeballs==2.6.1 # via aiohttp -aiohttp==3.13.0 +aiohttp==3.13.3 # via # aiohttp-cors # datasets