aces-metric (>=0.0.3, <=0.0.4), adaptor (>=0.2.3, <=0.2.5) +51 more potentially affected by CVE-2026-4372 via transformers (4.30.2)

transformers PYPI version 4.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aces-metric =0.0.3, =0.2.3, =0.0.1, =0.0.6, =0.0.1, =0.1.1, =2.3.0, =0.1.3, =2.7.0, =0.10.3, =0.1.2, =0.2.0, =0.3.1 and more Source cve...

any4any (0.1.1), bertnado (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-4372 via transformers (4.51.0)

transformers PYPI version 4.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - any4any 0.1.1 - bertnado =0.1.0, =0.0.0, =0.4.11, =0.1.0, =0.1.1 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

aisak (>=2.2.2, <=2.3.1), astaligner (1.0.2) +13 more potentially affected by CVE-2026-4372 via transformers (4.45.1)

transformers PYPI version 4.45.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aisak =2.2.2, =0.0.1, =1.0.0, =0.1.42.dev0, =0.1.4, =0.0.1a8, =1.0.0a43, =0.2.0, =0.0.8, =0.1.1, =0.3.8, =0.1.0, =0.1.4 Source cves:...

nepali-sentiment-analysis (>=0.1.0, <=1.0.0) potentially affected by CVE-2026-4372 via transformers (4.16.1)

transformers PYPI version 4.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nepali-sentiment-analysis =0.1.0, =1.0.0 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

aiu-fms-testing-utils (>=0.2.1, <=0.2.2), avalan (>=1.2.16, <=1.3.10) +2 more potentially affected by CVE-2026-4372 via transformers (4.55.0)

transformers PYPI version 4.55.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiu-fms-testing-utils =0.2.1, =1.2.16, =1.3.10 - live-translation 0.9.0 - vail-model-registry 0.1.12 Source cves: CVE-2026-4372 Source...

adapters (1.1.0), advtok (0.0.2) +44 more potentially affected by CVE-2026-4372 via transformers (4.47.1)

transformers PYPI version 4.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.0 - advtok 0.0.2 - akasha-terminal =0.9.0, =0.1.0, =1.3.0, =0.3.7, =2.1.7, =0.0.1, =1.0.0, =0.1.2, =0.1.55, =0.1.62 and mo...

allennlp (>=1.0.0rc6.dev20200602, <=1.1.0rc1.dev20200706), allennlp-models (>=1.1.0rc1.dev20200630, <=1.1.0rc1.dev20200706) +6 more potentially affected by CVE-2026-4372 via transformers (2.10.0)

transformers PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200602, =1.1.0rc1.dev20200630, =0.0.6, =2.7.3, =0.2.15, =0.2.0, =0.3.0 Source cves: CVE-2026-4372 Source...

azureml-automl-dnn-nlp (>=1.45.0, <=1.47.0), fastestimator (>=1.2.0, <=1.4.3) +3 more potentially affected by CVE-2026-4372 via transformers (4.6.0)

transformers PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.45.0, =1.2.0, =1.2.0.dev202105200119, =0.1.0, =0.1.7, =0.1.18 Source cves: CVE-2026-4372 Source advisory:...

anyclassifier (>=0.1.1, <=0.2.0), autotrain-advanced (>=0.7.30, <=0.7.43) +3 more potentially affected by CVE-2026-4372 via transformers (4.39.0)

transformers PYPI version 4.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - anyclassifier =0.1.1, =0.7.30, =0.1.3, =0.2.3, =0.2.4 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

3m (0.1.0), adapters (>=0.0.0.dev20230804, <=0.0.0.dev20230825) +61 more potentially affected by CVE-2026-4372 via transformers (4.31.0)

transformers PYPI version 4.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - 3m 0.1.0 - adapters =0.0.0.dev20230804, =0.8.0, =0.0.0, =0.8.3b20230817, =0.0.21.post1, =0.0.1, =0.1.1, =1.2.1, =0.1.4, =1.19.0rc1,...

jiant (2.2.0), keyextractor (>=0.1.1.dev2, <=0.1.2a1.dev1) +3 more potentially affected by CVE-2026-4372 via transformers (4.5.0)

transformers PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - jiant 2.2.0 - keyextractor =0.1.1.dev2, =0.2.0, =0.4.2 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

eznlp (>=0.2.5, <=0.3.1), jarvisai (>=0.2.7, <=3.4.0) +2 more potentially affected by CVE-2026-4372 via transformers (4.3.2)

transformers PYPI version 4.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - eznlp =0.2.5, =0.2.7, =0.0.3, =0.1.0 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

azureml-automl-dnn-nlp (>=1.53.1, <=1.54.0), cinosum (>=1.0.4, <=1.1.0) +2 more potentially affected by CVE-2026-4372 via transformers (4.33.1)

transformers PYPI version 4.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.53.1, =1.0.4, =1.0.1, =1.1.0 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

africanwhisper (0.2.1), agi-med-metrics (>=0.0.1, <=0.0.7) +51 more potentially affected by CVE-2026-4372 via transformers (4.38.2)

transformers PYPI version 4.38.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - africanwhisper 0.2.1 - agi-med-metrics =0.0.1, =0.1.9, =4.5.10.dev202403140317, =1.0.1b20240321, =1.0.1b20240321, =0.7.8, =0.1.1,...

bacpipe (>=1.1.0, <=1.3.0), certora-patrol (>=0.1.3, <=0.1.17) +9 more potentially affected by CVE-2026-4372 via transformers (4.56.0)

transformers PYPI version 4.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bacpipe =1.1.0, =0.1.3, =0.1.18, =0.2.1a0, =0.3.2, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-22...

antimatter (0.1.3), autotrain-advanced (>=0.6.42, <=0.6.44) +12 more potentially affected by CVE-2026-4372 via transformers (4.34.1)

transformers PYPI version 4.34.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - antimatter 0.1.3 - autotrain-advanced =0.6.42, =4.3.0, =1.22.0rc1, =1.0.1, =0.1.69, =0.1.73 - spacy-transformers 1.3.2 Source cves:...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-4372 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

allencv (>=0.1.2, <=0.1.3), allennlp (>=1.4.0, <=2.0.2.dev20210209) +25 more potentially affected by CVE-2026-4372 via transformers (4.2.2)

transformers PYPI version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allencv =0.1.2, =1.4.0, =0.0.3, =1.4.0, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.3.4, =0.1.0, =0.2.0 - model-hub 0.1.0.dev0 and more Source...

ammico-lavis (>=1.0.2.1, <=1.0.2.2), aniemore (1.2.3) +35 more potentially affected by CVE-2026-4372 via transformers (4.26.1)

transformers PYPI version 4.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis =1.0.2.1, =0.6.3b20230204, =0.0.2, =0.0.4, =0.6.1, =0.0.1, =0.1.1, =1.6.0.dev202305310417, =0.0.1, =2.0.0, =2.1.1 and more...

deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-4372 via transformers (4.21.2)

transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-4372 Source advisory:...