allennlp (>=2.9.0.dev20211224, <=2.9.0), bcipy (>=2.0.0rc1, <=2.0.1rc2) +13 more potentially affected by CVE-2026-5241 via transformers (4.15.0)

transformers PYPI version 4.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.9.0.dev20211224, =2.0.0rc1, =0.0.6, =1.0.6, =0.1.0, =1.2.0, =0.0.1, =0.0.2 - wandb-allennlp 0.3.1 Source cves: CVE-2026-524...

avalan (1.1.6), karma-medeval (>=0.1.0, <=0.2.0) +11 more potentially affected by CVE-2026-5241 via transformers (4.53.0)

transformers PYPI version 4.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan 1.1.6 - karma-medeval =0.1.0, =0.3.1, =0.0.1.2, =0.2.0, =0.9.0, =0.2.0, =0.2.2, =0.0.3, =0.0.4 - unimeth 0.0.2 -...

aihandler (>=1.8.20, <=1.9.1), aimet-torch (1.31.1) +16 more potentially affected by CVE-2026-5241 via transformers (4.27.4)

transformers PYPI version 4.27.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.8.20, =3.0.0, =0.2.0, =0.9.0, =1.0.4, =0.0.1, =0.0.1.post3, =0.0.1, =0.0.34, =0.0.39 and more Source cves: CVE-2026-5241...

appcategorizer (>=0.1.0, <=0.2.2), bicleaner-ai (>=3.3.1, <=3.4.0) +38 more potentially affected by CVE-2026-5241 via transformers (4.52.4)

transformers PYPI version 4.52.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - appcategorizer =0.1.0, =3.3.1, =0.1.1, =0.5.7, =0.2.13, =3.0.0, =3.0.0rc1, =0.4.0, =0.1.1, =1.1.0, =0.0.3, =0.0.6 and more Source cves:...

enot-autodl (>=3.3.1, <=3.4.3), farm-haystack (1.5.0) +6 more potentially affected by CVE-2026-5241 via transformers (4.19.2)

transformers PYPI version 4.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - enot-autodl =3.3.1, =0.7.2, =0.2.0, =2.1.0, =2.1.2 - textdiversity 0.0.1 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-229...

aiforthechurch (0.1.0), attention-sinks (>=0.2.2, <=0.4.0) +12 more potentially affected by CVE-2026-5241 via transformers (4.34.0)

transformers PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiforthechurch 0.1.0 - attention-sinks =0.2.2, =0.1.66, =2.2.0, =0.0.13, =0.1.0, =0.1.0, =0.2.0rc8, =1.0.0, =0.1.0, =0.2.0 - urag 0.0.1...

any4any (0.1.1), bertnado (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-5241 via transformers (4.51.0)

transformers PYPI version 4.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - any4any 0.1.1 - bertnado =0.1.0, =0.0.0, =0.4.11, =0.1.0, =0.1.1 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2026-5241 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2026-52...

dynamic-prompting (>=0.2.4, <=0.2.6), embedprepro (>=0.1.0, <=0.12.0) +6 more potentially affected by CVE-2026-5241 via transformers (4.41.1)

transformers PYPI version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dynamic-prompting =0.2.4, =0.1.0, =4.2.4, =0.1.0, =0.0.23, =0.0.4, =0.0.6 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-22...

aiagents4pharma (>=1.6.0, <=1.44.0), aitraining (>=0.0.0, <=0.8.37.dev0) +29 more potentially affected by CVE-2026-5241 via transformers (4.48.0)

transformers PYPI version 4.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiagents4pharma =1.6.0, =0.0.0, =0.8.35, =1.0.0, =0.3.5, =4.5.0, =0.1.1, =1.0.0, =0.4.1, =0.0.1a22, =0.1.1, =0.3.7 and more Source cves...

antimatter (0.1.3), autotrain-advanced (>=0.6.42, <=0.6.44) +12 more potentially affected by CVE-2026-5241 via transformers (4.34.1)

transformers PYPI version 4.34.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - antimatter 0.1.3 - autotrain-advanced =0.6.42, =4.3.0, =1.22.0rc1, =1.0.1, =0.1.69, =0.1.73 - spacy-transformers 1.3.2 Source cves:...

flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2026-5241 via transformers (2.2.2)

transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

arelight (0.24.0), bicleaner-ai (2.0.0rc2) +25 more potentially affected by CVE-2026-5241 via transformers (4.24.0)

transformers PYPI version 4.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - arelight 0.24.0 - bicleaner-ai 2.0.0rc2 - bnaug =1.0.0.dev0, =2.0.4, =0.0.0, =0.8.7a0, =1.0.0, =0.0.3, =0.0.1, =1.1.25, =1.2.28 and mor...

agentcraft-mcp (0.1.0), apteryx-transformers (>=0.1.1, <=0.1.5) +38 more potentially affected by CVE-2026-5241 via transformers (4.53.2)

transformers PYPI version 4.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agentcraft-mcp 0.1.0 - apteryx-transformers =0.1.1, =0.0.2, =0.0.8, =0.0.2, =1.0.1, =0.0.5, =0.1.2, =0.4.2, =0.4.1, =0.1.2, =1.1.7,...

africanwhisper (>=0.2.3, <=0.9.0), batched-melbo (0.1.0) +8 more potentially affected by CVE-2026-5241 via transformers (4.39.2)

transformers PYPI version 4.39.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - africanwhisper =0.2.3, =0.0.1a1, =0.1.1, =0.2.0, =0.0.2, =0.0.1, =0.2.1, =0.2.3, =0.2.3.post1 - rgpl 0.1.0 Source cves: CVE-2026-5241...

email-cleaning-service (>=0.0.1, <=1.0.0) potentially affected by CVE-2026-5241 via transformers (4.27.2)

transformers PYPI version 4.27.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - email-cleaning-service =0.0.1, =1.0.0 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

adapters (>=0.0.0.dev20231123, <=0.1.1), alexandra-ai (0.1.0) +50 more potentially affected by CVE-2026-5241 via transformers (4.35.2)

transformers PYPI version 4.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231123, =0.2.0, =0.6.45, =2.24.4, =0.1.1, =0.1.3, =0.1.105, =1.23.0rc1, =0.1.0rc1, =0.0.5, =0.3.11, =0.3.17 and mo...

adapters (0.1.2), azureml-automl-dnn-nlp (1.55.0) +65 more potentially affected by CVE-2026-5241 via transformers (4.36.2)

transformers PYPI version 4.36.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 0.1.2 - azureml-automl-dnn-nlp 1.55.0 - bcembedding =0.1.4, =0.1.0, =0.2.2, =0.0.1, =1.0.0, =0.3.4, =0.0.1rc7, =1.0.18, =0.0.1...

azureml-metrics (0.0.25.post1), deepvisiontools (>=0.1.0, <=0.2.0) +10 more potentially affected by CVE-2026-5241 via transformers (4.50.0)

transformers PYPI version 4.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-metrics 0.0.25.post1 - deepvisiontools =0.1.0, =0.7.0, =1.1.0, =1.4.0, =0.6.3, =0.1.0, =0.10.4, =0.11.0 Source cves:...

adapters (1.1.0), advtok (0.0.2) +44 more potentially affected by CVE-2026-5241 via transformers (4.47.1)

transformers PYPI version 4.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.0 - advtok 0.0.2 - akasha-terminal =0.9.0, =0.1.0, =1.3.0, =0.3.7, =2.1.7, =0.0.1, =1.0.0, =0.1.2, =0.1.55, =0.1.62 and mo...