fastnn (0.4.0), few-shot-learning-nlp (>=0.0.5, <=1.0.4) +9 more potentially affected by CVE-2026-69112 via accelerate (0.24.1)

accelerate PYPI version 0.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - fastnn 0.4.0 - few-shot-learning-nlp =0.0.5, =0.0.1a5, =3.4.0, =0.1.8, =0.2.25, =0.1.0, =0.1.2, =0.7.0, =0.10.0 Source cves: CVE-2026-69112...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-9335 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-9335 Source advisory: OSV:PYSEC-2026-3633...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12479 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12479 Source advisory: OSV:PYSEC-2026-3632...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12481 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12481 Source advisory: OSV:PYSEC-2026-3631...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12482 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12482 Source advisory: OSV:PYSEC-2026-3630...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-12570 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-12570 Source advisory: OSV:GHSA-74M6-M3XX-3VMJ...

azureml-automl-dnn-nlp (>=1.45.0, <=1.47.0), fastestimator (>=1.2.0, <=1.4.3) +3 more potentially affected by CVE-2026-9856 via transformers (4.6.0)

transformers PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.45.0, =1.2.0, =1.2.0.dev202105200119, =0.1.0, =0.1.7, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

azureml-automl-dnn-nlp (>=1.53.1, <=1.54.0), cinosum (>=1.0.4, <=1.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.33.1)

transformers PYPI version 4.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.53.1, =1.0.4, =1.0.1, =1.1.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

azureml-automl-dnn-nlp (>=1.48.0, <=1.53.0) potentially affected by CVE-2026-9856 via transformers (4.16.0)

transformers PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.48.0, =1.53.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allennlp (>=2.2.1.dev20210408, <=2.7.0), allennlp-dataframe-mapper (0.2.1) +20 more potentially affected by CVE-2026-9856 via transformers (4.5.1)

transformers PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.1.dev20210408, =2.2.1.dev20210329, =0.0.0.2, =1.37.0, =0.0.1, =0.1.0, =0.3.0b1, =0.0.1, =1.0.23, =1.1.3 - nlp-nn 0.0.11.0...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2026-9856 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

cf-nlp (>=0.1.0, <=0.1.11), deepdefacer (>=0.0.2, <=1.0.4) +7 more potentially affected by CVE-2026-9335 via keras (2.2.2)

keras PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cf-nlp =0.1.0, =0.0.2, =2.0.3, =0.6.0, =0.0.23, =0.2.0 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

pdf2emb-nlp (0.1.3), pdf2embeddings (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.2.5.1)

sentence-transformers PYPI version 0.2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - pdf2emb-nlp 0.1.3 - pdf2embeddings =0.1.0, =0.1.1 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQ...

SUSE CVE-2026-63317

Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...

adaptnlp (>=0.3.0, <=0.3.5), autonlp (>=0.2.8, <=0.3.2) +3 more potentially affected by CVE-2026-66007 via datasets (1.8.0)

datasets PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - adaptnlp =0.3.0, =0.2.8, =1.37.0, =3.1.0, =0.1.1, =0.1.7 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

autonlp (>=0.3.5, <=0.3.7), autotrain-advanced (0.4.0) +12 more potentially affected by CVE-2026-66007 via datasets (1.11.0)

datasets PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autonlp =0.3.5, =1.45.0, =0.0.1, =0.2.2, =0.0.2, =0.1.7, =2.0.0, =1.4.0, =0.1.3, =0.2.12, =0.2.14 Source cves: CVE-2026-66007 Source advisory:...

azureml-automl-dnn-nlp (1.55.0), azureml-evaluate-mlflow (>=0.0.16, <=0.0.25) +28 more potentially affected by CVE-2026-66007 via datasets (2.16.1)

datasets PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-automl-dnn-nlp 1.55.0 - azureml-evaluate-mlflow =0.0.16, =1.0.5, =0.0.5, =1.2.6, =1.0.0, =1.0.0, =0.9.0.13, =0.9.0, =1.0.0.dev0, =0.0.1...

adaptnlp (>=0.3.6, <=0.3.7), artificial-detection (0.1.0) +2 more potentially affected by CVE-2026-66007 via datasets (1.15.1)

datasets PYPI version 1.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - adaptnlp =0.3.6, =0.3.7 - artificial-detection 0.1.0 - lm-eval 0.2.0 - tailor-nlp 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

dataquality (>=0.8.7a0, <=0.8.12), internet-nlp (0.0.9) +1 more potentially affected by CVE-2026-66007 via datasets (2.6.1)

datasets PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - dataquality =0.8.7a0, =1.0.0.4, =1.0.0.6 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...