CGA-xhfr-jxgc-vmgv

This CVE originates from a transitive dependency on the wandb package. To address the issue, the upstream wandb project needs to publish a new release, which will enable nemo to update its dependency accordingly.