Critical CVE in `transformers` in versions < `4.36.0`
Thanks for letting us know. @athitten could you take a look if we can safely unpin Transformers ? Fyi @ericharper  This issue is stale because it has been open for 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. Any news related to this issue? This issue is stale because it has been open for 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. This issue was closed because it has been inactive for 7 days since being marked as stale.
The `transformers` requirement is bounded here https://github.com/NVIDIA/NeMo/blob/39d883f16ce57f06c40be19a99c881324b93360d/requirements/requirements_lightning.txt up to version `4.33.3`

There is a Critical CVE affecting versions < `4.36.0`, related information
- https://www.cve.org/CVERecord?id=CVE-2023-6730
- https://github.com/huggingface/transformers/commit/1d63b0ec361e7a38f1339385e8a5a855085532ce
- https://huntr.com/bounties/423611ee-7a2a-442a-babb-3ed2f8385c16/

This also would solve https://github.com/NVIDIA/NeMo/issues/7765 and https://github.com/NVIDIA/NeMo/pull/7620#issuecomment-1745874618
