berteome (>=0.0.1, <=0.1.6), langbrainscore (0.1.0) +5 more potentially affected by CVE-2026-9856 via transformers (4.10.0)

transformers PYPI version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - berteome =0.0.1, =0.2.0, =0.0.2, =0.0.9999, =1.0.0, =1.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-9856 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

any4any (0.1.1), bertnado (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-9856 via transformers (4.51.0)

transformers PYPI version 4.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - any4any 0.1.1 - bertnado =0.1.0, =0.0.0, =0.4.11, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

artificial-detection (0.1.0), benchformer (0.0.1.dev1) +1 more potentially affected by CVE-2026-9856 via transformers (4.12.3)

transformers PYPI version 4.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - artificial-detection 0.1.0 - benchformer 0.0.1.dev1 - tai-chi-engine =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2026-9856 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

axolotl (0.5.0), buzz-captions (1.2.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.46.1)

transformers PYPI version 4.46.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - axolotl 0.5.0 - buzz-captions 1.2.0 - fastvideo =0.0.1.dev0, =2.0.21, =0.1.1, =0.4.6, =0.1.0, =0.0.3.post1, =0.0.4 - xcodec2-infer-lib...

banglanlptoolkit (>=1.1.7.dev4, <=1.1.8), contextqa (>=2.0.0, <=2.0.5) +27 more potentially affected by CVE-2026-9856 via transformers (4.42.4)

transformers PYPI version 4.42.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - banglanlptoolkit =1.1.7.dev4, =2.0.0, =0.0.71, =0.0.1b2, =0.5.0rc0, =0.2.0, =1.0.0, =0.9.3, =0.1.0, =1.0.0, =0.1.0, =0.1.1 and more...

crslab (0.1.1), farm (>=0.6.0, <=0.7.1) +6 more potentially affected by CVE-2026-9856 via transformers (4.1.1)

transformers PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - crslab 0.1.1 - farm =0.6.0, =0.0.1, =0.0.2, =0.0.4, =0.0.2, =0.0.1, =0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-39...

aiu-fms-testing-utils (0.0.2a3), pathology-foundation-models (>=0.0.2, <=0.0.4) +1 more potentially affected by CVE-2026-9856 via transformers (4.54.0)

transformers PYPI version 4.54.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiu-fms-testing-utils 0.0.2a3 - pathology-foundation-models =0.0.2, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory:...

dadmatools (>=1.1.1.dev2, <=1.5.1), databalancer (>=0.0.7, <=0.0.8) +1 more potentially affected by CVE-2026-9856 via transformers (4.9.1)

transformers PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dadmatools =1.1.1.dev2, =0.0.7, =0.3.0, =0.3.4 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

chemical-converters (0.1.2), dora-phi4 (>=0.0.0, <=0.3.13) +14 more potentially affected by CVE-2026-9856 via transformers (4.48.2)

transformers PYPI version 4.48.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chemical-converters 0.1.2 - dora-phi4 =0.0.0, =0.1.10, =0.1.2, =0.13.3, =0.1.0, =0.0.7, =1.2.3, =0.5.8, =0.1.0, =0.8.2, =0.1.2, =1.1.5,...

ammico-lavis (>=1.0.2.1, <=1.0.2.2), aniemore (1.2.3) +35 more potentially affected by CVE-2026-9856 via transformers (4.26.1)

transformers PYPI version 4.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis =1.0.2.1, =0.6.3b20230204, =0.0.2, =0.0.4, =0.6.1, =0.0.1, =0.1.1, =1.6.0.dev202305310417, =0.0.1, =2.0.0, =2.1.1 and more...

airunner (>=4.1.2, <=4.11.3), auto-swagger (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2026-9856 via transformers (4.55.4)

transformers PYPI version 4.55.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =4.1.2, =0.1.0, =0.4.6, =0.1.1, =0.2.7, =0.1.5, =0.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 and more Source cves:...

email-cleaning-service (>=0.0.1, <=1.0.0) potentially affected by CVE-2026-9856 via transformers (4.27.2)

transformers PYPI version 4.27.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - email-cleaning-service =0.0.1, =1.0.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

autotrain-advanced (>=0.8.26, <=0.8.33), construe (>=0.2.0, <=0.4.0) +17 more potentially affected by CVE-2026-9856 via transformers (4.46.2)

transformers PYPI version 4.46.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.26, =0.2.0, =0.25.0, =1.1.1, =0.1.0, =0.0.9, =0.1.60, =0.1.1, =1.1.3, =0.2.4, =0.1.1, =0.1.4, =2.0.0, =0.1.0,...

serverless-llm-store (0.5.0), turbo-alignment (0.0.2) potentially affected by CVE-2026-9856 via transformers (4.42.0)

transformers PYPI version 4.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - serverless-llm-store 0.5.0 - turbo-alignment 0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +1884 more potentially affected by CVE-2026-9856 via transformers (4.57.6)

transformers PYPI version 4.57.6 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - a62-emotion =0.10.11, =0.5.5, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-9856 Source...

dynamic-prompting (>=0.2.4, <=0.2.6), embedprepro (>=0.1.0, <=0.12.0) +6 more potentially affected by CVE-2026-9856 via transformers (4.41.1)

transformers PYPI version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dynamic-prompting =0.2.4, =0.1.0, =4.2.4, =0.1.0, =0.0.23, =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-39...

alignment-handbook (0.2.0), decoders (0.1.0) +12 more potentially affected by CVE-2026-9856 via transformers (4.35.0)

transformers PYPI version 4.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - alignment-handbook 0.2.0 - decoders 0.1.0 - dragon-baseline =0.1.0, =0.1.0, =0.3.1, =0.0.14, =0.1.2, =0.82.0, =0.1.0, =0.1.0, =0.9.2,...