unsloth (>=2025.11.2, <=2025.11.6), unsloth-zoo (>=2025.11.3, <=2025.12.1) potentially affected by CVE-2026-9856 via transformers (4.57.2)

transformers PYPI version 4.57.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - unsloth =2025.11.2, =2025.11.3, =2025.12.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

nemo-toolkit (1.2.0), ratsnlp (0.0.9993) +1 more potentially affected by CVE-2026-9856 via transformers (4.8.1)

transformers PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nemo-toolkit 1.2.0 - ratsnlp 0.0.9993 - summac =0.0.1, =0.0.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

adapters (1.0.0), airunner (>=3.0.0, <=3.1.7) +13 more potentially affected by CVE-2026-9856 via transformers (4.43.4)

transformers PYPI version 4.43.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.0.0 - airunner =3.0.0, =1.5.3, =0.0.10, =0.0.0, =0.11.0, =0.1.2, =0.4.6, =2.2.4, =1.21.3, =1.13.0, =1.18.2, =1.0.7, =1.1.14 ...

aihandler (>=1.8.20, <=1.9.1), aimet-torch (1.31.1) +16 more potentially affected by CVE-2026-9856 via transformers (4.27.4)

transformers PYPI version 4.27.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.8.20, =3.0.0, =0.2.0, =0.9.0, =1.0.4, =0.0.1, =0.0.1.post3, =0.0.1, =0.0.34, =0.0.39 and more Source cves: CVE-2026-9856...

bacpipe (>=1.1.0, <=1.3.0), certora-patrol (>=0.1.3, <=0.1.17) +9 more potentially affected by CVE-2026-9856 via transformers (4.56.0)

transformers PYPI version 4.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bacpipe =1.1.0, =0.1.3, =0.1.18, =0.2.1a0, =0.3.2, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory:...

autotrain-advanced (>=0.8.26, <=0.8.33), construe (>=0.2.0, <=0.4.0) +17 more potentially affected by CVE-2026-9856 via transformers (4.46.2)

transformers PYPI version 4.46.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.26, =0.2.0, =0.25.0, =1.1.1, =0.1.0, =0.0.9, =0.1.60, =0.1.1, =1.1.3, =0.2.4, =0.1.1, =0.1.4, =2.0.0, =0.1.0,...

axolotl (0.5.0), buzz-captions (1.2.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.46.1)

transformers PYPI version 4.46.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - axolotl 0.5.0 - buzz-captions 1.2.0 - fastvideo =0.0.1.dev0, =2.0.21, =0.1.1, =0.4.6, =0.1.0, =0.0.3.post1, =0.0.4 - xcodec2-infer-lib...

chatglm6bpkg (0.0.1), instruction-ner (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-9856 via transformers (4.27.1)

transformers PYPI version 4.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chatglm6bpkg 0.0.1 - instruction-ner =0.1.3, =0.1.6 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

dadmatools (>=1.1.1.dev2, <=1.5.1), databalancer (>=0.0.7, <=0.0.8) +1 more potentially affected by CVE-2026-9856 via transformers (4.9.1)

transformers PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dadmatools =1.1.1.dev2, =0.0.7, =0.3.0, =0.3.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

auto-ner (>=0.1.0, <=0.1.2), cog-hf-template (0.0.2) +10 more potentially affected by CVE-2026-9856 via transformers (4.32.1)

transformers PYPI version 4.32.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-ner =0.1.0, =0.1.0, =0.0.5, =3.4.4, =1.0.0, =1.20.0rc1, =0.0.3, =1.0.8, =0.0.1, =0.0.9 Source cves: CVE-2026-9856 Source advisory:...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-9856 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

adapters (1.0.1), agent-driftwatch (>=0.1.0, <=0.2.5) +68 more potentially affected by CVE-2026-9856 via transformers (4.45.2)

transformers PYPI version 4.45.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.0.1 - agent-driftwatch =0.1.0, =0.1.0, =0.6.2.post1, =4.3.0, =0.0.2, =1.0.0, =0.1.9, =2.1.1rc2, =0.1.1, =1.0.0, =5.1.6,...

agentcraft-mcp (0.1.0), apteryx-transformers (>=0.1.1, <=0.1.5) +37 more potentially affected by CVE-2026-9856 via transformers (4.53.2)

transformers PYPI version 4.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agentcraft-mcp 0.1.0 - apteryx-transformers =0.1.1, =0.0.2, =0.0.8, =0.0.2, =1.0.1, =0.0.5, =0.1.2, =0.4.2, =0.4.1, =0.1.2, =1.1.7,...

amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.1)

transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...

aihandler (>=1.9.2, <=1.10.2), airunner (>=1.9.1, <=1.10.3) +37 more potentially affected by CVE-2026-9856 via transformers (4.28.1)

transformers PYPI version 4.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.9.2, =1.9.1, =1.0.1, =1.0.0, =0.2.3, =0.1.0, =0.0.7, =0.0.88, =1.4.5, =0.0.9, =0.2.4, =0.0.1, =0.1.2, =0.2.2 and more Sour...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-9856...

avalan (>=1.0.5, <=1.1.5), deepmost (0.5.2) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.3)

transformers PYPI version 4.52.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.0.5, =0.1.2, =0.0.0, =0.8.2, =1.3.0, =0.2.0, =0.1.8, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-9856 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

anyclassifier (>=0.1.1, <=0.2.0), autotrain-advanced (>=0.7.30, <=0.7.43) +3 more potentially affected by CVE-2026-9856 via transformers (4.39.0)

transformers PYPI version 4.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - anyclassifier =0.1.1, =0.7.30, =0.1.3, =0.2.3, =0.2.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...