a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +2553 more potentially affected by CVE-2026-80047 via transformers (>=4.49.0, <=5.8.1)

transformers PYPI version =4.49.0, =0.10.11, =0.5.5, =1.0.0.0, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-80047 Source advisory: OSV:PYSEC-2026-4174...

CVE-2026-80047

creationtimestamp| type| source ---|---|--- 2026-09-02 02:49:01+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muiwdwyln52l 2026-09-02 07:30:52+00:00| seen| https://bsky.app/profile/newsfacts.bsky.social/post/3mujg3vvro22j...

a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +2553 more potentially affected by CVE-2026-80047 via transformers (>=4.49.0, <=5.8.1)

transformers PYPI version =4.49.0, =0.10.11, =0.5.5, =1.0.0.0, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-80047 Source advisory: OSV:GHSA-X9R9-C232-4Q39...

a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +2553 more potentially affected by CVE-2026-80047 via transformers (>=4.49.0, <=5.8.1)

transformers PYPI version =4.49.0, =0.10.11, =0.5.5, =1.0.0.0, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-80047 Source advisory: GHSA-X9R9-C232-4Q39...

PT-2026-84227

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers versions 4.49.0 through 5.8.1 Description A consent-bypass issue exists where remote Python files are written to the local disk without user consent. This occurs when using the load custom generate function, which...