mengzi-zero-shot (>=0.1.0, <=0.2.1), nalcos (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-9856 via transformers (4.10.1)

transformers PYPI version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - mengzi-zero-shot =0.1.0, =0.1.1, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

agixt (>=1.3.84, <=1.3.106), ai-dive (0.0.1) +8 more potentially affected by CVE-2026-9856 via transformers (4.30.1)

transformers PYPI version 4.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agixt =1.3.84, =1.15.3, =1.16.3, =0.0.1, =1.18.0rc1, =0.2.22, =0.2.32 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX...

slp (>=1.2.0, <=1.2.1) potentially affected by CVE-2026-9856 via transformers (4.3.0)

transformers PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - slp =1.2.0, =1.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

nemo-toolkit (1.2.0), ratsnlp (0.0.9993) +1 more potentially affected by CVE-2026-9856 via transformers (4.8.1)

transformers PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nemo-toolkit 1.2.0 - ratsnlp 0.0.9993 - summac =0.0.1, =0.0.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

dadmatools (>=1.1.1.dev2, <=1.5.1), databalancer (>=0.0.7, <=0.0.8) +1 more potentially affected by CVE-2026-9856 via transformers (4.9.1)

transformers PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dadmatools =1.1.1.dev2, =0.0.7, =0.3.0, =0.3.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-9856 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-9856 Source advisory:...

adapters (1.0.0), airunner (>=3.0.0, <=3.1.7) +13 more potentially affected by CVE-2026-9856 via transformers (4.43.4)

transformers PYPI version 4.43.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.0.0 - airunner =3.0.0, =1.5.3, =0.0.10, =0.0.0, =0.11.0, =0.1.2, =0.4.6, =2.2.4, =1.21.3, =1.13.0, =1.18.2, =1.0.7, =1.1.14 ...

textregress (>=1.0.0, <=1.2.1) potentially affected by CVE-2026-9856 via transformers (4.27.0)

transformers PYPI version 4.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - textregress =1.0.0, =1.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-9856 via transformers (4.41.0)

transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-9856...

auto-ner (>=0.1.0, <=0.1.2), cog-hf-template (0.0.2) +10 more potentially affected by CVE-2026-9856 via transformers (4.32.1)

transformers PYPI version 4.32.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-ner =0.1.0, =0.1.0, =0.0.5, =3.4.4, =1.0.0, =1.20.0rc1, =0.0.3, =1.0.8, =0.0.1, =0.0.9 Source cves: CVE-2026-9856 Source advisory:...

booknlp2 (>=1.0.0, <=1.0.1), classy-core (>=0.1.0.dev20211019, <=0.2.1) +10 more potentially affected by CVE-2026-9856 via transformers (4.11.3)

transformers PYPI version 4.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - booknlp2 =1.0.0, =0.1.0.dev20211019, =0.1.0, =1.2.0, =0.3.0, =1.1.0.dev4, =1.1.0, =1.2.0 - zensols-mednlp 0.0.1 Source cves:...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

ammico-lavis (>=1.0.2.1, <=1.0.2.2), aniemore (1.2.3) +35 more potentially affected by CVE-2026-9856 via transformers (4.26.1)

transformers PYPI version 4.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis =1.0.2.1, =0.6.3b20230204, =0.0.2, =0.0.4, =0.6.1, =0.0.1, =0.1.1, =1.6.0.dev202305310417, =0.0.1, =2.0.0, =2.1.1 and more...

aitoolbox (>=1.0.0, <=1.1.0), allencv (>=0.1.0, <=0.1.1) +59 more potentially affected by CVE-2026-9856 via transformers (4.20.1)

transformers PYPI version 4.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitoolbox =1.0.0, =0.1.0, =2.10.0, =0.1.0, =0.0.3, =2.10.0, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.2, =0.4.3b20220621, =0.4.3b20220621,...

abgpt (>=0.1.1, <=0.1.2), adaptive-reranker (>=0.1.0, <=0.1.1) +81 more potentially affected by CVE-2026-9856 via transformers (4.44.2)

transformers PYPI version 4.44.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - abgpt =0.1.1, =0.1.0, =0.1.0, =0.8.16, =0.0.2, =0.5.4, =0.3.3, =2.6.0b1, =0.1.2, =0.1.16, =0.0.1.dev1, =0.0.2, =0.0.6 - craftext 0.2.2...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2026-9856 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

avalan (1.1.6), karma-medeval (>=0.1.0, <=0.2.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.53.0)

transformers PYPI version 4.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan 1.1.6 - karma-medeval =0.1.0, =0.3.1, =0.0.1.2, =0.2.0, =0.9.0, =0.2.0, =0.2.2, =0.0.3, =0.0.4 - unimeth 0.0.2 -...

alignment-handbook (0.1.0), geniebottle (0.0.3) +7 more potentially affected by CVE-2026-9856 via transformers (4.37.1)

transformers PYPI version 4.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - alignment-handbook 0.1.0 - geniebottle 0.0.3 - llm-docstring-generator 1.0.0 - lmdeploy =0.2.3, =0.0.2, =0.0.6, =0.0.7 - video2dataset...

avalan (>=1.2.0, <=1.2.13), mcp-instana (0.1.1) +4 more potentially affected by CVE-2026-9856 via transformers (4.53.1)

transformers PYPI version 4.53.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.2.0, =0.8.6, =0.9.2a0, =0.9.1a0, =0.9.2 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...