Security: transformers 4.41.2 flagged by Veracode (6 High / 7 Medium) — please upgrade

Hi Flair maintainers

Our dependency scanning (Veracode SCA) is flagging transformers==4.41.2 as vulnerable. Since transformers is a transitive dependency for Flair in our setup, this is impacting downstream users.

What we’re seeing Package: transformers Version: 4.41.2 Tool: Veracode SCA Findings: 6 High severity + 7 Medium severity issues (per Veracode)

Could you please:

Confirm whether Flair can upgrade/pin transformers to a non-vulnerable version, and

share guidance on the minimum safe version you recommend (or whether there’s an alternate dependency approach)?

Many thanks for considering my request!