This release updates more worker libraries with known security problems. Nothing changes in how Anysub works.
Security
- Updated the worker libraries nltk, aiohttp, urllib3, multidict, lightning, Mako and OpenTelemetry to versions with security fixes. 4.0.2 missed these because its security check skipped the speech libraries.
Known issues
- The worker still uses PyTorch 2.8 and transformers 4.57, which have published security advisories. The fixed versions need a newer WhisperX, which isn't released yet. The advisories are about loading untrusted model files and about features Anysub doesn't use. Anysub only downloads models from its own fixed list.