CVE-2021-4118

Advisory

Unbabel-comet 1.1.0 updates its dependency 'pytorch-lightning' to v1.6.0 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

1) Updated [documentation](https://unbabel.github.io/COMET/html/index.html)
2) Updated Pytorch Lightning version to avoid security vulnerabilities (Untrusted Data & Code Injection)
3) Inspired by [Amrhein et al, 2022](https://arxiv.org/abs/2202.05148) we added the `comet-mbr` command for fast Minimum Bayes Risk Decoding.
4) New encoder models

What's Changed
* Fix minor typo in exception message by alvations in https://github.com/Unbabel/COMET/pull/57
* Adds --quiet flag by Remorax in https://github.com/Unbabel/COMET/pull/58
* Bug fix of num_workers. by devrimcavusoglu in https://github.com/Unbabel/COMET/pull/63
* fix encoding issues for Windows users by erip in https://github.com/Unbabel/COMET/pull/68

New Contributors
* alvations made their first contribution in https://github.com/Unbabel/COMET/pull/57
* Remorax made their first contribution in https://github.com/Unbabel/COMET/pull/58
* devrimcavusoglu made their first contribution in https://github.com/Unbabel/COMET/pull/63
* erip made their first contribution in https://github.com/Unbabel/COMET/pull/68

**Full Changelog**: https://github.com/Unbabel/COMET/compare/v1.0.1...v1.1.0

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4118