Fix version conflict: use PyTorch 2.5.0 + TorchVision 0.20.0 exact match

Dockerfile

@@ -22,8 +22,8 @@ WORKDIR /app
 # Copy requirements
 COPY requirements.txt .
 
-# Install PyTorch 2.5.1 with compatible TorchVision 0.20.0 - using safetensors to avoid CVE-2025-32434
-RUN pip install torch==2.5.1 torchvision==0.20.0 torchaudio==2.5.1 --index-url https://download.pytorch.org/whl/cu121
+# Install PyTorch 2.5.0 with compatible TorchVision 0.20.0 - using safetensors to avoid CVE-2025-32434
+RUN pip install torch==2.5.0 torchvision==0.20.0 torchaudio==2.5.0 --index-url https://download.pytorch.org/whl/cu121
 
 # Skip llama-cpp-python to avoid compilation - using transformers instead
 

app.py

@@ -81,7 +81,7 @@ async def load_model():
                 device_map="auto" if device == "cuda" else None,
                 trust_remote_code=True,
                 low_cpu_mem_usage=True,
-                use_safetensors=True,  # Force safetensors to avoid CVE-2025-32434 (PyTorch 2.5.1 vulnerable to torch.load RCE)
+                use_safetensors=True,  # Force safetensors to avoid CVE-2025-32434 (PyTorch 2.5.0 vulnerable to torch.load RCE)
                 token=hf_token
             )
             

requirements.txt

@@ -1,7 +1,7 @@
 fastapi==0.104.1
 uvicorn[standard]==0.24.0
 pydantic==2.5.0
-torch==2.5.1
+torch==2.5.0
 transformers>=4.35.0
 accelerate>=0.24.0
 bitsandbytes>=0.41.0