From 2c7180cdfe039bc2b67d348d70e168d9439defe5 Mon Sep 17 00:00:00 2001 From: chensuyue Date: Wed, 11 Mar 2026 15:47:41 +0800 Subject: [PATCH 1/2] add notes for CVEs Signed-off-by: chensuyue --- .../language-modeling/quantization/static_quant/ipex/README.md | 2 ++ .../quantization/static_quant/ipex/requirements.txt | 1 - .../weight_only/text-generation/requirements_GPU.txt | 2 -- 3 files changed, 2 insertions(+), 3 deletions(-) diff --git a/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/README.md b/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/README.md index 8ecdc6c5110..90cca1c7c36 100644 --- a/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/README.md +++ b/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/README.md @@ -8,8 +8,10 @@ The script `run_clm_no_trainer.py` supports `GPTJ`, `OPT`, `LLaMA2`, `BLOOM` and ## 1. Create Environment ``` # Installation +pip install transformers < 4.48.0 pip install -r requirements.txt ``` +note: `transformers` version should be less than 4.48.0 to run this example, but it may cause security vulnerabilities, please use it with caution. CVE-2024-11393,CVE-2024-11394,CVE-2024-11392,CVE-2024-12720,CVE-2025-5197,CVE-2025-3264,CVE-2025-3263,CVE-2025-6051,CVE-2025-6921,CVE-2025-6638,CVE-2025-3933,CVE-2025-2099,CVE-2025-1194,CVE-2025-3777. # Run diff --git a/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/requirements.txt b/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/requirements.txt index 9af5428c37d..884714c6b18 100644 --- a/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/requirements.txt +++ b/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/static_quant/ipex/requirements.txt @@ -3,7 +3,6 @@ protobuf sentencepiece != 0.1.92 datasets >= 1.1.3 torch >= 1.10 -transformers < 4.48.0 # TODO: ILITV-3858 pytest wandb einops diff --git a/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/transformers/weight_only/text-generation/requirements_GPU.txt b/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/transformers/weight_only/text-generation/requirements_GPU.txt index c4a30b4db18..a59a55b13cd 100644 --- a/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/transformers/weight_only/text-generation/requirements_GPU.txt +++ b/examples/pytorch/nlp/huggingface_models/language-modeling/quantization/transformers/weight_only/text-generation/requirements_GPU.txt @@ -4,8 +4,6 @@ diffusers peft protobuf sentencepiece != 0.1.92 ---extra-index-url https://pytorch-extension.intel.com/release-whl/stable/xpu/us/ -torch==2.7.1+cpu transformers bitsandbytes #baichuan transformers_stream_generator From 1e0211e2bb8028f60812316014e791f5f115a57b Mon Sep 17 00:00:00 2001 From: chensuyue Date: Wed, 11 Mar 2026 15:51:16 +0800 Subject: [PATCH 2/2] remove code Signed-off-by: chensuyue --- .azure-pipelines/scripts/ut/run_3x_jax.sh | 1 - .azure-pipelines/ut-3x-jax.yml | 1 - 2 files changed, 2 deletions(-) diff --git a/.azure-pipelines/scripts/ut/run_3x_jax.sh b/.azure-pipelines/scripts/ut/run_3x_jax.sh index e2e5e76ac68..3a1f8c26c2a 100644 --- a/.azure-pipelines/scripts/ut/run_3x_jax.sh +++ b/.azure-pipelines/scripts/ut/run_3x_jax.sh @@ -5,7 +5,6 @@ echo "${test_case}" echo "##[section]Run import check" set -e -export KERAS_BACKEND=jax python -c "import neural_compressor.jax" python -c "import neural_compressor.common" echo "##[section]import check pass" diff --git a/.azure-pipelines/ut-3x-jax.yml b/.azure-pipelines/ut-3x-jax.yml index 810b49dba36..ed6faee38a0 100644 --- a/.azure-pipelines/ut-3x-jax.yml +++ b/.azure-pipelines/ut-3x-jax.yml @@ -11,7 +11,6 @@ pr: - neural_compressor/common - neural_compressor/jax - test/jax - - test/common - setup.py - requirements_jax.txt - .azure-pipelines/scripts/ut/run_3x_jax.sh