autotrain-advanced (0.8.6), swiftannotate (0.1.0) potentially affected by CVE-2026-1839 via transformers (4.43.0)

transformers PYPI version 4.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced 0.8.6 - swiftannotate 0.1.0 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-1839 via transformers (4.41.0)

transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-1839...

aphrodite-engine (>=0.6.0, <=0.6.2), autodatagen (0.0.1) +3 more potentially affected by CVE-2026-1839 via transformers (4.44.1)

transformers PYPI version 4.44.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aphrodite-engine =0.6.0, =0.8.12, =1.0.5, =1.0.9 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

autotrain-advanced (>=0.8.21, <=0.8.25), cehrbert (1.5.0) +1 more potentially affected by CVE-2026-1839 via transformers (4.45.0)

transformers PYPI version 4.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.21, =0.0.13, =0.1.1 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

allophant (1.0.0), at-20250801 (0.1.0) +50 more potentially affected by CVE-2026-1839 via transformers (4.41.2)

transformers PYPI version 4.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allophant 1.0.0 - at-20250801 0.1.0 - atomgpt 2024.11.30 - audiotoken 0.1.0 - autotrain-advanced =0.7.119, =0.0.1, =0.2.24, =1.0.1,...

autotrain-advanced (>=0.6.52, <=0.6.80), bicleaner-ai (>=3.0.1, <=3.2.1) +5 more potentially affected by CVE-2026-1839 via transformers (4.36.1)

transformers PYPI version 4.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.52, =3.0.1, =0.1.4, =0.0.2, =0.0.12 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-1839 via transformers (4.41.0)

transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-1839...

aphrodite-engine (>=0.6.0, <=0.6.2), autodatagen (0.0.1) +3 more potentially affected by CVE-2026-1839 via transformers (4.44.1)

transformers PYPI version 4.44.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aphrodite-engine =0.6.0, =0.8.12, =1.0.5, =1.0.9 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

autotrain-advanced (>=0.8.2, <=0.8.5), nltkor (>=1.2.8, <=1.2.24) potentially affected by CVE-2026-1839 via transformers (4.42.2)

transformers PYPI version 4.42.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.2, =1.2.8, =1.2.24 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

autotrain-advanced (>=0.6.95, <=0.7.1), dialogy (>=0.10.4, <=2.2.5) +10 more potentially affected by CVE-2026-1839 via transformers (4.38.0)

transformers PYPI version 4.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.95, =0.10.4, =1.7.0, =0.0.1, =0.10.9, =0.1.0, =0.1.17, =0.1.20 - profanity-sanitizer 0.1.4 - team-comm-tools...

anyclassifier (>=0.1.1, <=0.2.0), autotrain-advanced (>=0.7.30, <=0.7.43) +3 more potentially affected by CVE-2026-1839 via transformers (4.39.0)

transformers PYPI version 4.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - anyclassifier =0.1.1, =0.7.30, =0.1.3, =0.2.3, =0.2.4 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

autotrain-advanced (>=0.7.53, <=0.7.63), codontransformer (>=0.1.0, <=0.2.0) +13 more potentially affected by CVE-2026-1839 via transformers (4.40.0)

transformers PYPI version 4.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.53, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =2.9.0, =2.9.0, =0.1.0, =0.1.6 - wafl-llm 0.0.83 Source cves:...

PT-2026-30965

Name of the Vulnerable Software and Affected Versions ChurchCRM versions prior to 7.1.0 Description ChurchCRM, an open-source church management system, has an issue where the searchwhat parameter in 'QueryView.php' with 'QueryID=15' is susceptible to SQL injection. An authenticated user needs...

OrangeHRM 加密问题漏洞

OrangeHRM is a human resources management system developed by the American company OrangeHRM. This system supports functions such as personnel information management, leave management, attendance management, and recruitment management. Versions of OrangeHRM prior to 5.8 contained a security...

CVE-2026-4740: Improper Certificate Validation

A flaw was found in Open Cluster Management OCM, the technology underlying Red Hat Advanced Cluster Management ACM. Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate that can be approved by the OCM controller. This...

PT-2026-30972

OrangeHRM is a comprehensive human resource management HRM system. From 5.0 to 5.8, OrangeHRM Open Source encrypts certain sensitive fields with AES in ECB mode, which preserves block-aligned plaintext patterns in ciphertext and enables pattern disclosure against stored data. This vulnerability i...

PT-2026-31035

Name of the Vulnerable Software and Affected Versions OpenSSL FIPS Module version 3.6 Description Applications utilizing AES-CFB128 encryption or decryption on systems equipped with AVX-512 and VAES support may experience an out-of-bounds read of up to 15 bytes when handling partial cipher blocks...

EUVD-2026-19285

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, configuration values from the /api/config endpoint are placed directly into HTML value="" attributes without escaping in settings-advanced.js,...

EUVD-2016-10862

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts...

CVE-2016-20055

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts...