Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[cye/wandb-fix] Fix WandB issue. (#530)
## Summary - `wandb>=0.19.1`: `wandb` Path validation bug has been fixed [between 0.19.0 and 0.19.1](wandb/wandb@v0.19.0...v0.19.1). - Specifically, this commit / PR: [chore: allow pathlib.Path's for path-related Settings](wandb/wandb@2f11cc7) - CVE "Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto" is fixed in `0.19.1` as well. Two birds, one stone. (Was never a "true" vuln.) ## Details - Resolves this NVBug for [CVE GHSA-v778-237x-gjrc](GHSA-v778-237x-gjrc): https://nvbugspro.nvidia.com/bug/5010582 - WandB PR: wandb/wandb#9069 (comment) - Slack Threads - `Path` Validation Issue: https://nvidia.slack.com/archives/C074Z808N05/p1733418209959769 and https://nvidia-external.slack.com/archives/C016YA15HB3/p1733439699068689 - WandB CVE: https://nvidia.slack.com/archives/C074Z808N05/p1734047115497109 ## Usage - N/A ## Testing - CI Pipelines - https://prod.blsm.nvidia.com/bionemo-external-bionemo-fw/job/branch_pipeline/533/ - https://prod.blsm.nvidia.com/bionemo-external-bionemo-fw/job/pr_pipeline/1220/
- Loading branch information