chemical-converters (0.1.2), dora-phi4 (>=0.0.0, <=0.3.13) +14 more potentially affected by CVE-2026-9856 via transformers (4.48.2)

transformers PYPI version 4.48.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chemical-converters 0.1.2 - dora-phi4 =0.0.0, =0.1.10, =0.1.2, =0.13.3, =0.1.0, =0.0.7, =1.2.3, =0.5.8, =0.1.0, =0.8.2, =0.1.2, =1.1.5,...

grandmaster (>=0.0.3, <=0.0.5), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-9856 via transformers (4.27.3)

transformers PYPI version 4.27.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - grandmaster =0.0.3, =0.0.9, =0.0.17, =0.0.5, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

adaptor (>=0.1.0, <=0.1.3), obsei (0.0.10) potentially affected by CVE-2026-9856 via transformers (4.10.2)

transformers PYPI version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptor =0.1.0, =0.1.3 - obsei 0.0.10 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

adaptnlp (>=0.3.0, <=0.3.7), chatting-chatbots (0.0.1) +16 more potentially affected by CVE-2026-9856 via transformers (4.12.2)

transformers PYPI version 4.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptnlp =0.3.0, =0.2.2, =0.0.1, =0.1.0rc0, =0.0.1, =0.0.4, =2.0.0, =1.0.0, =1.6.1, =1.6.11 - textattack 0.3.5 and more Source cves:...

aitraining (>=0.0.7, <=0.0.49), chatterbox-mlx (>=1.0.0, <=1.0.5) +48 more potentially affected by CVE-2026-9856 via transformers (4.57.3)

transformers PYPI version 4.57.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitraining =0.0.7, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.4.0, =0.3.2, =0.4.0 - lynxbench-ai 1.0.0 and more Source cves:...

arelight (0.24.0), bicleaner-ai (2.0.0rc2) +25 more potentially affected by CVE-2026-9856 via transformers (4.24.0)

transformers PYPI version 4.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - arelight 0.24.0 - bicleaner-ai 2.0.0rc2 - bnaug =1.0.0.dev0, =2.0.4, =0.0.0, =0.8.7a0, =1.0.0, =0.0.3, =0.0.1, =1.1.25, =1.2.28 and mor...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

alignment-handbook (0.2.0), decoders (0.1.0) +12 more potentially affected by CVE-2026-9856 via transformers (4.35.0)

transformers PYPI version 4.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - alignment-handbook 0.2.0 - decoders 0.1.0 - dragon-baseline =0.1.0, =0.1.0, =0.3.1, =0.0.14, =0.1.2, =0.82.0, =0.1.0, =0.1.0, =0.9.2,...

aitoolbox (>=1.0.0, <=1.1.0), allencv (>=0.1.0, <=0.1.1) +59 more potentially affected by CVE-2026-9856 via transformers (4.20.1)

transformers PYPI version 4.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitoolbox =1.0.0, =0.1.0, =2.10.0, =0.1.0, =0.0.3, =2.10.0, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.2, =0.4.3b20220621, =0.4.3b20220621,...

deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.21.2)

transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-9856 Source advisory:...

agentcraft-mcp (0.1.0), apteryx-transformers (>=0.1.1, <=0.1.5) +37 more potentially affected by CVE-2026-9856 via transformers (4.53.2)

transformers PYPI version 4.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agentcraft-mcp 0.1.0 - apteryx-transformers =0.1.1, =0.0.2, =0.0.8, =0.0.2, =1.0.1, =0.0.5, =0.1.2, =0.4.2, =0.4.1, =0.1.2, =1.1.7,...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-9856 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

dlk (>=0.0.1, <=0.0.4), pyannotators-trfclassifier (>=0.5.79, <=0.5.85) +5 more potentially affected by CVE-2026-9856 via transformers (4.12.0)

transformers PYPI version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dlk =0.0.1, =0.5.79, =0.5.182, =0.5.39, =0.5.185, =0.5.98, =0.5.55, =0.5.59 Source cves: CVE-2026-9856 Source advisory:...

allennlp (>=0.9.1.dev20200220, <=0.9.1.dev20200401), anilv-interpret-text (0.0.1) +9 more potentially affected by CVE-2026-9856 via transformers (2.4.1)

transformers PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200220, =0.5.8, =0.1.2, =0.0.12b0, =1.0.1, =1.0.0.dev202005031000, =0.1.1, =0.2.2, =0.3.0, =0.5.11 Source cves:...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-9856 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

bacpipe (>=1.1.0, <=1.3.0), certora-patrol (>=0.1.3, <=0.1.17) +9 more potentially affected by CVE-2026-9856 via transformers (4.56.0)

transformers PYPI version 4.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bacpipe =1.1.0, =0.1.3, =0.1.18, =0.2.1a0, =0.3.2, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-39...

bluecore-models (>=0.11.1, <=0.25.0), orilinx (1.0.1) potentially affected by CVE-2026-9856 via transformers (4.57.5)

transformers PYPI version 4.57.5 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bluecore-models =0.11.1, =0.25.0 - orilinx 1.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

ads-and (0.1.3), ads-bib (>=0.1.0, <=0.3.3) +39 more potentially affected by CVE-2026-9856 via transformers (4.56.2)

transformers PYPI version 4.56.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ads-and 0.1.3 - ads-bib =0.1.0, =0.8.0, =0.1.0, =2.0.0rc2, =0.1.0, =0.15.5, =0.1.1, =0.13.2, =1.0.3.post1.dev0, =1.0.0, =1.0.5 and more...

abgpt (>=0.1.1, <=0.1.2), adaptive-reranker (>=0.1.0, <=0.1.1) +81 more potentially affected by CVE-2026-9856 via transformers (4.44.2)

transformers PYPI version 4.44.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - abgpt =0.1.1, =0.1.0, =0.1.0, =0.8.16, =0.0.2, =0.5.4, =0.3.3, =2.6.0b1, =0.1.2, =0.1.16, =0.0.1.dev1, =0.0.2, =0.0.6 - craftext 0.2.2...

cltl-dialogue-evaluation (>=0.1.0.dev1, <=0.2.7.dev1), kwja (>=1.0.0, <=1.2.2) +6 more potentially affected by CVE-2026-9856 via transformers (4.19.4)

transformers PYPI version 4.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cltl-dialogue-evaluation =0.1.0.dev1, =1.0.0, =1.5.3, =0.0.20, =1.3.0, =1.10.1 - zensols-spanmatch 0.0.1 Source cves: CVE-2026-9856...