autotrain-advanced (>=0.6.52, <=0.6.80), bicleaner-ai (>=3.0.1, <=3.2.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.36.1)

transformers PYPI version 4.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.52, =3.0.1, =0.1.4, =0.0.2, =0.0.12 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

augly-jp (>=2021.9.6, <=2021.9.26), biome-text (3.3.0) +10 more potentially affected by CVE-2026-9856 via transformers (4.9.2)

transformers PYPI version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - augly-jp =2021.9.6, =1.2.1, =0.1.0, =1.0.4, =1.0.6 - tkittagger 0.0.0.2 - wafl 0.0.1 - zero-shot-re 0.0.4 Source cves: CVE-2026-9856...

aait (>=1.0.0.0, <=2.3.14), adapters (1.2.0) +87 more potentially affected by CVE-2026-9856 via transformers (4.51.3)

transformers PYPI version 4.51.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aait =1.0.0.0, =0.3.16, =0.1.0, =0.6.1, =0.1.0, =0.1.1, =0.1.122 - colpali-engine 0.3.10 - coqui-tts 0.26.2 - dadmatools 2.3.0 and more...

ai-dynamo (>=0.7.0, <=0.7.1), aitraining (>=0.0.2, <=0.0.6) +39 more potentially affected by CVE-2026-9856 via transformers (4.57.1)

transformers PYPI version 4.57.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-dynamo =0.7.0, =0.0.2, =0.2.1, =1.0.0a1, =1.2.6, =2026.1.0rc2, =0.1.3, =2.1.21, =0.5.2.post1, =1.3.5, =1.5.0 and more Source cves:...

avalan (>=1.0.5, <=1.1.5), deepmost (0.5.2) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.3)

transformers PYPI version 4.52.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.0.5, =0.1.2, =0.0.0, =0.8.2, =1.3.0, =0.2.0, =0.1.8, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

aihandler (>=1.8.20, <=1.9.1), aimet-torch (1.31.1) +16 more potentially affected by CVE-2026-9856 via transformers (4.27.4)

transformers PYPI version 4.27.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.8.20, =3.0.0, =0.2.0, =0.9.0, =1.0.4, =0.0.1, =0.0.1.post3, =0.0.1, =0.0.34, =0.0.39 and more Source cves: CVE-2026-9856...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-9856 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

africanwhisper (>=0.2.3, <=0.9.0), batched-melbo (0.1.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.39.2)

transformers PYPI version 4.39.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - africanwhisper =0.2.3, =0.0.1a1, =0.1.1, =0.2.0, =0.0.2, =0.0.1, =0.2.1, =0.2.3, =0.2.3.post1 - rgpl 0.1.0 Source cves: CVE-2026-9856...

academic-emotion (0.1.2), aqlm (>=1.0.0, <=1.0.1) +10 more potentially affected by CVE-2026-9856 via transformers (4.37.0)

transformers PYPI version 4.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - academic-emotion 0.1.2 - aqlm =1.0.0, =0.6.81, =1.1.0, =3.6.1, =0.1.1, =0.1.3, =0.0.4, =0.2.1, =0.10.0, =0.18.2 Source cves:...

bacpipe (>=1.1.0, <=1.3.0), certora-patrol (>=0.1.3, <=0.1.17) +9 more potentially affected by CVE-2026-9856 via transformers (4.56.0)

transformers PYPI version 4.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bacpipe =1.1.0, =0.1.3, =0.1.18, =0.2.1a0, =0.3.2, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-39...

jiant (2.2.0), keyextractor (>=0.1.1.dev2, <=0.1.2a1.dev1) +3 more potentially affected by CVE-2026-9856 via transformers (4.5.0)

transformers PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - jiant 2.2.0 - keyextractor =0.1.1.dev2, =0.2.0, =0.4.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +9 more potentially affected by CVE-2026-9856 via transformers (4.55.2)

transformers PYPI version 4.55.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiagents4pharma =0.0.0, =0.2.3, =0.1.0, =0.7.0, =0.3.8, =0.4.6 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

exciton (>=1.4.0, <=1.4.3), leafnlp (0.0.17) +1 more potentially affected by CVE-2026-9856 via transformers (4.11.2)

transformers PYPI version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - exciton =1.4.0, =0.0.3, =0.0.4 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

aait (0.0.4.80), adore (>=0.0.1, <=0.1.2) +108 more potentially affected by CVE-2026-9856 via transformers (4.46.3)

transformers PYPI version 4.46.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aait 0.0.4.80 - adore =0.0.1, =5.0.0, =5.0.0, =0.1.8, =0.1.3, =26.5.1, =0.1.0, =0.1.0, =0.1.6 - chatterbox-tts-api 1.0.0 and more Sourc...

autotrain-advanced (>=0.7.53, <=0.7.63), codontransformer (>=0.1.0, <=0.2.0) +13 more potentially affected by CVE-2026-9856 via transformers (4.40.0)

transformers PYPI version 4.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.53, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =2.9.0, =2.9.0, =0.1.0, =0.1.6 - wafl-llm 0.0.83 Source cves:...

allophant (1.0.0), at-20250801 (0.1.0) +50 more potentially affected by CVE-2026-9856 via transformers (4.41.2)

transformers PYPI version 4.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allophant 1.0.0 - at-20250801 0.1.0 - atomgpt 2024.11.30 - audiotoken 0.1.0 - autotrain-advanced =0.7.119, =0.0.1, =0.2.24, =1.0.1,...

allennlp (2.9.2), classy-core (>=0.3.0.dev20220423, <=0.3.2) +15 more potentially affected by CVE-2026-9856 via transformers (4.17.0)

transformers PYPI version 4.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 2.9.2 - classy-core =0.3.0.dev20220423, =0.0.1, =0.0.11, =1.1.9, =0.1.0, =1.1.18, =0.7.0, =1.0.1a2, =1.0.2.1 and more Source...

arelight (0.24.0), bicleaner-ai (2.0.0rc2) +25 more potentially affected by CVE-2026-9856 via transformers (4.24.0)

transformers PYPI version 4.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - arelight 0.24.0 - bicleaner-ai 2.0.0rc2 - bnaug =1.0.0.dev0, =2.0.4, =0.0.0, =0.8.7a0, =1.0.0, =0.0.3, =0.0.1, =1.1.25, =1.2.28 and mor...

allencv (>=0.1.2, <=0.1.3), allennlp (>=1.4.0, <=2.0.2.dev20210209) +25 more potentially affected by CVE-2026-9856 via transformers (4.2.2)

transformers PYPI version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allencv =0.1.2, =1.4.0, =0.0.3, =1.4.0, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.3.4, =0.1.0, =0.2.0 - model-hub 0.1.0.dev0 and more Source...

briton (>=0.3.1.dev1, <=0.3.13.post2), mobilevisiontest (1.0.1) +7 more potentially affected by CVE-2026-9856 via transformers (4.46.0)

transformers PYPI version 4.46.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - briton =0.3.1.dev1, =6.0.0, =6.0.0, =1.0.0, =1.2.0, =1.2.1 - slime-nlp 0.1.0 - trustrag 0.0.15 Source cves: CVE-2026-9856 Source...