[Bug] docker image opea/lvm-llava has security issue

[ZePan110]

Priority

P2-High

OS type

Ubuntu

Hardware type

Xeon-GNR

Installation method

• Pull docker images from hub.docker.com
• Build docker images from source
• Other

Deploy method

• Docker
• Docker Compose
• Kubernetes Helm Charts
• Other

Running nodes

Single Node

What's the version?

latest image

Description

Docker image opea/lvm-llava has security issue, need change transformers version in GenAIComps/comps/lvms/src/integrations/dependency/llava/requirements.txt

Link: https://github.com/opea-project/GenAIExamples/actions/runs/13361338646/job/37311453795

Reproduce steps

docker pull opea/lvm-llava:latest
docker run --rm -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy:latest image opea/lvm-llava

Raw log

Attachments

No response

[yinghu5]

Hi @Spycsh @ZePan110 thank you a lot for the report.
The current version was updated to 4.48.0 https://github.com/opea-project/GenAIComps/pull/1296](https://github.com/opea-project/GenAIComps/blob/eadfe2f8d49a7c1f3020cfbbb18eb31ad9d40751/comps/lvms/src/integrations/dependency/llama-vision/requirements_tp.txt#L9). Close as completed.

[ZePan110]

The issue still exist, Reopen ticket. https://github.com/opea-project/GenAIComps/actions/runs/14347495468/job/40219967128

[ZePan110]

This issue has been fixed. https://github.com/opea-project/GenAIComps/actions/runs/15456845063/artifacts/3264177131