archit (>=2026.3.1, <=2026.4.1), argilla-plugins (>=0.1.2, <=0.1.3) +70 more potentially affected by CVE-2026-4372 via transformers (4.49.0)

transformers PYPI version 4.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - archit =2026.3.1, =0.1.2, =1.3.2b20250620, =1.2.1b20250404, =1.2.1b20250404, =0.1.2, =1.1.6, =0.1.0, =2.7.6, =0.39.0, =0.1.3, =0.1.40 a...

open-rag-eval (>=0.2.4, <=0.3.0) potentially affected by CVE-2026-4372 via transformers (4.50.2)

transformers PYPI version 4.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - open-rag-eval =0.2.4, =0.3.0 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

autotrain-advanced (>=0.8.7, <=0.8.8), bloombee (>=0.1.1, <=0.1.3) +7 more potentially affected by CVE-2026-4372 via transformers (4.43.1)

transformers PYPI version 4.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.7, =0.1.1, =1.0.0, =1.1.28.14, =0.1.0, =0.3.8, =1.1.0, =1.2.2 - turbo-alignment 0.0.4 Source cves: CVE-2026-437...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-4372 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

accord-nlp (1.0.2), adapters (0.2.2) +54 more potentially affected by CVE-2026-4372 via transformers (4.40.2)

transformers PYPI version 4.40.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp 1.0.2 - adapters 0.2.2 - alphadia =1.6.1, =0.0.1, =0.8.3, =1.1.1b20240522, =0.1.8, =0.0.1, =0.0.1, =0.1.2, =0.3.1,...

berteome (>=0.0.1, <=0.1.6), langbrainscore (0.1.0) +5 more potentially affected by CVE-2026-4372 via transformers (4.10.0)

transformers PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - berteome =0.0.1, =0.2.0, =0.0.2, =0.0.9999, =1.0.0, =1.0.2 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

classy-core (0.1.0a0), disformers (>=0.0.1, <=0.10.7) +2 more potentially affected by CVE-2026-4372 via transformers (4.11.0)

transformers PYPI version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - classy-core 0.1.0a0 - disformers =0.0.1, =0.10.7 - pyconverse 0.1.0 - zeroshot-topics 0.1.0 Source cves: CVE-2026-4372 Source advisory:...

airunner (>=3.1.8, <=3.1.14), ano-code (>=1.1.39, <=8.0.34) +19 more potentially affected by CVE-2026-4372 via transformers (4.48.1)

transformers PYPI version 4.48.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =3.1.8, =1.1.39, =3.1.6, =0.0.1, =1.0.0, =0.1.0, =2.6.0rc1, =0.1.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.3.2 -...

grandmaster (>=0.0.3, <=0.0.5), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-4372 via transformers (4.27.3)

transformers PYPI version 4.27.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - grandmaster =0.0.3, =0.0.9, =0.0.17, =0.0.5, =0.1.1 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

aihandler (>=1.9.2, <=1.10.2), airunner (>=1.9.1, <=1.10.3) +37 more potentially affected by CVE-2026-4372 via transformers (4.28.1)

transformers PYPI version 4.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.9.2, =1.9.1, =1.0.1, =1.0.0, =0.2.3, =0.1.0, =0.0.7, =0.0.88, =1.4.5, =0.0.9, =0.2.4, =0.0.1, =0.1.2, =0.2.2 and more Sour...

allennlp (>=1.0.0rc6.dev20200604, <=1.1.0rc1.dev20200709), allennlp-models (>=1.0.0rc6, <=1.1.0rc1.dev20200709) +29 more potentially affected by CVE-2026-4372 via transformers (2.11.0)

transformers PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200604, =1.0.0rc6, =0.0.1rc1, =0.1.2, =0.1.3, =0.5.2, =0.1.2, =3.0.1, =0.1.0, =1.8.0, =0.12.2.dev2, =0.12.2.dev...

chemical-converters (0.1.2), dora-phi4 (>=0.0.0, <=0.3.13) +14 more potentially affected by CVE-2026-4372 via transformers (4.48.2)

transformers PYPI version 4.48.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chemical-converters 0.1.2 - dora-phi4 =0.0.0, =0.1.10, =0.1.2, =0.13.3, =0.1.0, =0.0.7, =1.2.3, =0.5.8, =0.1.0, =0.8.2, =0.1.2, =1.1.5,...

aiforthechurch (0.1.0), attention-sinks (>=0.2.2, <=0.4.0) +11 more potentially affected by CVE-2026-4372 via transformers (4.34.0)

transformers PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiforthechurch 0.1.0 - attention-sinks =0.2.2, =0.1.66, =2.2.0, =0.0.13, =0.1.0, =0.1.0, =0.2.0rc8, =1.0.0, =0.1.0, =0.2.0 - urag 0.0.1...

ktrain (0.31.2), mt-telescope (0.0.2) +7 more potentially affected by CVE-2026-4372 via transformers (4.10.3)

transformers PYPI version 4.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktrain 0.31.2 - mt-telescope 0.0.2 - paoding 0.1.1 - reading4listeners =0.0.2b0, =0.0.1rc1, =0.0.1rc0, =1.1.0.dev0, =1.0.0rc6, =1.0.1...

auto-deep-learning (>=0.1.5.1, <=0.1.5.4), autogluon-multimodal (>=0.6.3b20230121, <=0.6.3b20230203) +50 more potentially affected by CVE-2026-4372 via transformers (4.25.1)

transformers PYPI version 4.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-deep-learning =0.1.5.1, =0.6.3b20230121, =0.0.1, =0.0.1, =2.3.0, =0.1.3, =0.0.1rc5, =0.0.7, =0.0.1, =1.12.0rc1, =0.12.0, =0.12.1 -...

ads-and (0.1.3), ads-bib (>=0.1.0, <=0.3.3) +39 more potentially affected by CVE-2026-4372 via transformers (4.56.2)

transformers PYPI version 4.56.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ads-and 0.1.3 - ads-bib =0.1.0, =0.8.0, =0.1.0, =2.0.0rc2, =0.1.0, =0.15.5, =0.1.1, =0.13.2, =1.0.3.post1.dev0, =1.0.0, =1.0.5 and more...

langchain-timbr (>=2.1.0, <=3.3.0), otat (>=0.1.0, <=0.1.3) +5 more potentially affected by CVE-2026-4372 via transformers (4.57.0)

transformers PYPI version 4.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - langchain-timbr =2.1.0, =0.1.0, =1.0.1, =0.5.3rc2, =1.1.4, =0.0.1, =0.1.3 - vllm-kunlun 0.11.1 Source cves: CVE-2026-4372 Source...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-4372 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

algorin-cli (>=0.0.1, <=0.21.0), autotrain-advanced (>=0.7.2, <=0.7.7) +8 more potentially affected by CVE-2026-4372 via transformers (4.38.1)

transformers PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - algorin-cli =0.0.1, =0.7.2, =0.1.0, =0.0.92, =0.2.5, =2.0.0a12, =0.1.0, =0.1.4 Source cves: CVE-2026-4372 Source advisory:...

aces-metric (>=0.0.3, <=0.0.4), adaptor (>=0.2.3, <=0.2.5) +51 more potentially affected by CVE-2026-4372 via transformers (4.30.2)

transformers PYPI version 4.30.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aces-metric =0.0.3, =0.2.3, =0.0.1, =0.0.6, =0.0.1, =0.1.1, =2.3.0, =0.1.3, =2.7.0, =0.10.3, =0.1.2, =0.2.0, =0.3.1 and more Source cve...