WAR against GHSA-vqfr-h8mv-ghfj

Signed-off-by: Martin Marciniszyn Mehringer <[email protected]>

Author: MartinMarciniszyn

constraints.txt

@@ -0,0 +1,2 @@
+# WAR against https://github.com/advisories/GHSA-vqfr-h8mv-ghfj
+h11>=0.16.0

docker/Dockerfile.multi

@@ -72,6 +72,9 @@ RUN bash ./install_pytorch.sh $TORCH_INSTALL_TYPE && rm install_pytorch.sh
 RUN pip3 uninstall -y opencv && rm -rf /usr/local/lib/python3*/dist-packages/cv2/
 RUN pip3 install opencv-python-headless --force-reinstall --no-deps --no-cache-dir
 
+# WAR against https://github.com/advisories/GHSA-vqfr-h8mv-ghfj
+RUN pip3 install --upgrade h11>=0.16 --no-cache-dir
+
 
 FROM ${TRITON_IMAGE}:${TRITON_BASE_TAG} AS triton
 
@@ -102,7 +105,7 @@ COPY benchmarks benchmarks
 COPY scripts scripts
 COPY tensorrt_llm tensorrt_llm
 COPY 3rdparty 3rdparty
-COPY .gitmodules setup.py requirements.txt requirements-dev.txt ./
+COPY .gitmodules setup.py requirements.txt requirements-dev.txt constraints.txt ./
 
 # Create cache directories for pip and ccache
 RUN mkdir -p /root/.cache/pip /root/.cache/ccache

requirements.txt

@@ -1,4 +1,5 @@
 --extra-index-url https://download.pytorch.org/whl/cu128
+-c constraints.txt
 accelerate>=0.25.0
 build
 colored