--- a
+++ b/requirements-cve.txt
@@ -0,0 +1,10 @@
+onnx>=1.16.0
+setuptools>=70.0.0
+aiohttp>=3.9.4
+jupyterlab>=3.6.8
+jupyter_server>=2.14.1  # https://github.com/advisories/GHSA-hrw6-wg82-cm62
+Werkzeug>=3.0.3
+nltk>=3.9.1
+pillow>=10.3.0
+tornado>=6.4.2
+wandb>=0.19.1 # Addresses CVE GHSA-v778-237x-gjrc