apple-silicon-booknlp (1.0.7.1), bcqa (>=1.0.0, <=1.1.4) +10 more potentially affected by CVE-2026-9856 via transformers (4.30.0)

transformers PYPI version 4.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - apple-silicon-booknlp 1.0.7.1 - bcqa =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.1.6, =0.1.0, =0.2.5, =0.1.2, =0.0.1, =0.0.3 Source cves:...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

exciton (>=1.4.0, <=1.4.3), leafnlp (0.0.17) +1 more potentially affected by CVE-2026-9856 via transformers (4.11.2)

transformers PYPI version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - exciton =1.4.0, =0.0.3, =0.0.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

africanwhisper (>=0.2.3, <=0.9.0), batched-melbo (0.1.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.39.2)

transformers PYPI version 4.39.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - africanwhisper =0.2.3, =0.0.1a1, =0.1.1, =0.2.0, =0.0.2, =0.0.1, =0.2.1, =0.2.3, =0.2.3.post1 - rgpl 0.1.0 Source cves: CVE-2026-9856...

adv-bible-search (>=0.1.0, <=0.1.1), bert-squeeze (>=0.1.0, <=0.1.1) +9 more potentially affected by CVE-2026-9856 via transformers (4.29.0)

transformers PYPI version 4.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adv-bible-search =0.1.0, =0.1.0, =1.0.0, =0.3.11, =0.4.0, =0.1.3, =0.2.1, =2.0.0, =0.0.8, =0.0.9 Source cves: CVE-2026-9856 Source...

ammico-lavis (>=1.0.2.1, <=1.0.2.2), aniemore (1.2.3) +35 more potentially affected by CVE-2026-9856 via transformers (4.26.1)

transformers PYPI version 4.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis =1.0.2.1, =0.6.3b20230204, =0.0.2, =0.0.4, =0.6.1, =0.0.1, =0.1.1, =1.6.0.dev202305310417, =0.0.1, =2.0.0, =2.1.1 and more...

alignment-handbook (0.1.0), geniebottle (0.0.3) +7 more potentially affected by CVE-2026-9856 via transformers (4.37.1)

transformers PYPI version 4.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - alignment-handbook 0.1.0 - geniebottle 0.0.3 - llm-docstring-generator 1.0.0 - lmdeploy =0.2.3, =0.0.2, =0.0.6, =0.0.7 - video2dataset...

aait (0.0.4.80), adore (>=0.0.1, <=0.1.2) +108 more potentially affected by CVE-2026-9856 via transformers (4.46.3)

transformers PYPI version 4.46.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aait 0.0.4.80 - adore =0.0.1, =5.0.0, =5.0.0, =0.1.8, =0.1.3, =26.5.1, =0.1.0, =0.1.0, =0.1.6 - chatterbox-tts-api 1.0.0 and more Sourc...

codegaze (0.0.23a0), deep-copilot (>=0.0.5, <=0.0.8) +13 more potentially affected by CVE-2026-9856 via transformers (4.21.3)

transformers PYPI version 4.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - codegaze 0.0.23a0 - deep-copilot =0.0.5, =0.3.2, =0.0.1, =0.0.1a0, =0.0.1, =0.2.1, =0.20.0 - spacy-transformers 1.1.8 -...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-9856 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

ads-and (0.1.3), ads-bib (>=0.1.0, <=0.3.3) +39 more potentially affected by CVE-2026-9856 via transformers (4.56.2)

transformers PYPI version 4.56.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ads-and 0.1.3 - ads-bib =0.1.0, =0.8.0, =0.1.0, =2.0.0rc2, =0.1.0, =0.15.5, =0.1.1, =0.13.2, =1.0.3.post1.dev0, =1.0.0, =1.0.5 and more...

aisak (>=2.2.2, <=2.3.1), astaligner (1.0.2) +13 more potentially affected by CVE-2026-9856 via transformers (4.45.1)

transformers PYPI version 4.45.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aisak =2.2.2, =0.0.1, =1.0.0, =0.1.42.dev0, =0.1.4, =0.0.1a8, =1.0.0a43, =0.2.0, =0.0.8, =0.1.1, =0.3.8, =0.1.0, =0.1.4 Source cves:...

chemical-converters (0.1.2), dora-phi4 (>=0.0.0, <=0.3.13) +14 more potentially affected by CVE-2026-9856 via transformers (4.48.2)

transformers PYPI version 4.48.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chemical-converters 0.1.2 - dora-phi4 =0.0.0, =0.1.10, =0.1.2, =0.13.3, =0.1.0, =0.0.7, =1.2.3, =0.5.8, =0.1.0, =0.8.2, =0.1.2, =1.1.5,...

algorin-cli (>=0.0.1, <=0.21.0), autotrain-advanced (>=0.7.2, <=0.7.7) +8 more potentially affected by CVE-2026-9856 via transformers (4.38.1)

transformers PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - algorin-cli =0.0.1, =0.7.2, =0.1.0, =0.0.92, =0.2.5, =2.0.0a12, =0.1.0, =0.1.4 Source cves: CVE-2026-9856 Source advisory:...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-9856 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-9856 via transformers (4.41.0)

transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-9856...

aiforthechurch (0.1.0), attention-sinks (>=0.2.2, <=0.4.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.34.0)

transformers PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiforthechurch 0.1.0 - attention-sinks =0.2.2, =0.1.66, =2.2.0, =0.0.13, =0.1.0, =0.1.0, =0.2.0rc8, =1.0.0, =0.1.0, =0.2.0 - urag 0.0.1...

chain-guardrail (>=0.0.10, <=0.0.11), dulu (0.1.4) +10 more potentially affected by CVE-2026-9856 via transformers (4.42.3)

transformers PYPI version 4.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chain-guardrail =0.0.10, =0.1.3, =1.0.1, =0.0.5, =0.3.4, =1.0.0, =2.5.9, =2.6.2 Source cves: CVE-2026-9856 Source advisory:...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-9856 Source advisory:...

mengzi-zero-shot (>=0.1.0, <=0.2.1), nalcos (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-9856 via transformers (4.10.1)

transformers PYPI version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - mengzi-zero-shot =0.1.0, =0.1.1, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...