pdf2emb-nlp (0.1.3), pdf2embeddings (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.2.5.1)

sentence-transformers PYPI version 0.2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - pdf2emb-nlp 0.1.3 - pdf2embeddings =0.1.0, =0.1.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2024-5452 via pytorch-lightning (0.7.1)

pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2024-5452 Source advisory:...

benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2024-5980 via pytorch-lightning (0.7.1)

pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2024-5980 Source advisory:...

fastnn (0.4.0), few-shot-learning-nlp (>=0.0.5, <=1.0.4) +9 more potentially affected by CVE-2026-69112 via accelerate (0.24.1)

accelerate PYPI version 0.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - fastnn 0.4.0 - few-shot-learning-nlp =0.0.5, =0.0.1a5, =3.4.0, =0.1.8, =0.2.25, =0.1.0, =0.1.2, =0.7.0, =0.10.0 Source cves: CVE-2026-69112...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2026-9856 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

allennlp (>=2.2.1.dev20210408, <=2.7.0), allennlp-dataframe-mapper (0.2.1) +20 more potentially affected by CVE-2026-9856 via transformers (4.5.1)

transformers PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.1.dev20210408, =2.2.1.dev20210329, =0.0.0.2, =1.37.0, =0.0.1, =0.1.0, =0.3.0b1, =0.0.1, =1.0.23, =1.1.3 - nlp-nn 0.0.11.0...

azureml-automl-dnn-nlp (>=1.45.0, <=1.47.0), fastestimator (>=1.2.0, <=1.4.3) +3 more potentially affected by CVE-2026-9856 via transformers (4.6.0)

transformers PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.45.0, =1.2.0, =1.2.0.dev202105200119, =0.1.0, =0.1.7, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

azureml-automl-dnn-nlp (>=1.48.0, <=1.53.0) potentially affected by CVE-2026-9856 via transformers (4.16.0)

transformers PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.48.0, =1.53.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

azureml-automl-dnn-nlp (>=1.53.1, <=1.54.0), cinosum (>=1.0.4, <=1.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.33.1)

transformers PYPI version 4.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.53.1, =1.0.4, =1.0.1, =1.1.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

Deserialization of Untrusted Data

Overview flair is an A very simple framework for state-of-the-art NLP Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the ClusteringModel.load function. An attacker can execute arbitrary code by providing a malicious model file that is loaded through this...

fact-checking (0.0.1), hc-nlp (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2026-73415 via jupyterlab (2.2.9)

jupyterlab PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - fact-checking 0.0.1 - hc-nlp =0.1.0, =0.0.2, =0.0.5 - muvimaker 0.2.6b0 - zero-shot-re 0.0.4 Source cves: CVE-2026-73415 Source advisory:...

fastnn (0.4.0), few-shot-learning-nlp (>=0.0.5, <=1.0.4) +9 more potentially affected by CVE-2026-69112 via accelerate (0.24.1)

accelerate PYPI version 0.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - fastnn 0.4.0 - few-shot-learning-nlp =0.0.5, =0.0.1a5, =3.4.0, =0.1.8, =0.2.25, =0.1.0, =0.1.2, =0.7.0, =0.10.0 Source cves: CVE-2026-69112...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12482 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12481 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12481 Source advisory: OSV:PYSEC-2026-3631...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12479 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12479 Source advisory: OSV:PYSEC-2026-3632...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-9335 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-9335 Source advisory: OSV:PYSEC-2026-3633...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12570 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2026-9856 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...