Skip to content

Anysub 4.0.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 06:34
· 6 commits to main since this release
v4.0.3
This tag was signed with the committer’s verified signature.
pluja
SSH Key Fingerprint: 2sbpR+axHxNS5Vulji1lZuSuVYiXDK6L4yHepFa2uC4
Verified
Learn about vigilant mode.
eaca0d2
This commit was signed with the committer’s verified signature.
pluja
SSH Key Fingerprint: 2sbpR+axHxNS5Vulji1lZuSuVYiXDK6L4yHepFa2uC4
Verified
Learn about vigilant mode.

This release updates more worker libraries with known security problems. Nothing changes in how Anysub works.

Security

  • Updated the worker libraries nltk, aiohttp, urllib3, multidict, lightning, Mako and OpenTelemetry to versions with security fixes. 4.0.2 missed these because its security check skipped the speech libraries.

Known issues

  • The worker still uses PyTorch 2.8 and transformers 4.57, which have published security advisories. The fixed versions need a newer WhisperX, which isn't released yet. The advisories are about loading untrusted model files and about features Anysub doesn't use. Anysub only downloads models from its own fixed list.
Assets 4
Loading