azureml-automl-dnn-nlp (>=1.53.1, <=1.54.0), cinosum (>=1.0.4, <=1.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.33.1)

transformers PYPI version 4.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.53.1, =1.0.4, =1.0.1, =1.1.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

exiv (>=0.1.0, <=0.2.0), fai-rl (>=0.1.2, <=0.1.17) +12 more potentially affected by CVE-2026-9856 via transformers (4.56.1)

transformers PYPI version 4.56.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - exiv =0.1.0, =0.1.2, =1.0.0.dev0, =1.3.0, =0.1.1, =0.9.0, =0.0.0.dev0, =0.1.0, =0.2.0 - transformers-crf 0.3.2 - voco-neutts 0.0.1 Sour...

aiagents4pharma (>=1.6.0, <=1.44.0), aitraining (>=0.0.0, <=0.8.37.dev0) +29 more potentially affected by CVE-2026-9856 via transformers (4.48.0)

transformers PYPI version 4.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiagents4pharma =1.6.0, =0.0.0, =0.8.35, =1.0.0, =0.3.5, =4.5.0, =0.1.1, =1.0.0, =0.4.1, =0.0.1a22, =0.1.1, =0.3.7 and more Source cves...

adamix-gpt2 (>=0.0.1, <=0.0.2), allennlp (>=1.2.0rc1.dev20200930, <=1.2.0rc1.dev20201021) +6 more potentially affected by CVE-2026-9856 via transformers (3.3.1)

transformers PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adamix-gpt2 =0.0.1, =1.2.0rc1.dev20200930, =1.2.0rc1.dev20201007, =0.0.1, =0.5.0, =0.1.11, =0.1.12 - mc-transformers 0.1.11 Source cves:...

aitraining (>=0.0.7, <=0.0.49), chatterbox-mlx (>=1.0.0, <=1.0.5) +48 more potentially affected by CVE-2026-9856 via transformers (4.57.3)

transformers PYPI version 4.57.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitraining =0.0.7, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.4.0, =0.3.2, =0.4.0 - lynxbench-ai 1.0.0 and more Source cves:...

cltl-dialogue-evaluation (>=0.1.0.dev1, <=0.2.7.dev1), kwja (>=1.0.0, <=1.2.2) +6 more potentially affected by CVE-2026-9856 via transformers (4.19.4)

transformers PYPI version 4.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cltl-dialogue-evaluation =0.1.0.dev1, =1.0.0, =1.5.3, =0.0.20, =1.3.0, =1.10.1 - zensols-spanmatch 0.0.1 Source cves: CVE-2026-9856...

agent-memory-jojo (0.1.3), airunner (>=3.2.0, <=4.1.1) +45 more potentially affected by CVE-2026-9856 via transformers (4.50.3)

transformers PYPI version 4.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agent-memory-jojo 0.1.3 - airunner =3.2.0, =0.1.0, =0.4.3, =0.0.3, =0.2.2, =0.1.0, =0.20.0, =1.0.9, =0.6.4, =2.8.0rc1, =2.8.2 and more...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

frony-document-processor (0.3.0), vllm-plugin-meralion2 (>=0.1.2.post2.dev1, <=0.1.2.post2) +1 more potentially affected by CVE-2026-9856 via transformers (4.50.1)

transformers PYPI version 4.50.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - frony-document-processor 0.3.0 - vllm-plugin-meralion2 =0.1.2.post2.dev1, =1.0.0rc1, =1.0.0rc2 Source cves: CVE-2026-9856 Source...

cog-hf-template (>=0.0.3, <=0.0.5), dbgpt-hub (0.3.1) +9 more potentially affected by CVE-2026-9856 via transformers (4.33.2)

transformers PYPI version 4.33.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cog-hf-template =0.0.3, =0.1.4, =0.3.0, =2.0.14, =0.1.1, =0.1.5 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

adapters (1.1.1), aibrix (>=0.3.0rc1, <=0.5.0rc1) +56 more potentially affected by CVE-2026-9856 via transformers (4.48.3)

transformers PYPI version 4.48.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.1 - aibrix =0.3.0rc1, =0.1.0.dev1, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.1.3, =0.0.1a0, =0.1.5, =1.0.0, =1.1.4 -...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2026-9856 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

grandmaster (>=0.0.3, <=0.0.5), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-9856 via transformers (4.27.3)

transformers PYPI version 4.27.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - grandmaster =0.0.3, =0.0.9, =0.0.17, =0.0.5, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

airunner (>=3.1.8, <=3.1.14), ano-code (>=1.1.39, <=8.0.34) +19 more potentially affected by CVE-2026-9856 via transformers (4.48.1)

transformers PYPI version 4.48.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =3.1.8, =1.1.39, =3.1.6, =0.0.1, =1.0.0, =0.1.0, =2.6.0rc1, =0.1.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.3.2 -...

auto-deep-learning (>=0.1.5.1, <=0.1.5.4), autogluon-multimodal (>=0.6.3b20230121, <=0.6.3b20230203) +50 more potentially affected by CVE-2026-9856 via transformers (4.25.1)

transformers PYPI version 4.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-deep-learning =0.1.5.1, =0.6.3b20230121, =0.0.1, =0.0.1, =2.3.0, =0.1.3, =0.0.1rc5, =0.0.7, =0.0.1, =1.12.0rc1, =0.12.0, =0.12.1 -...

antimatter (0.1.3), autotrain-advanced (>=0.6.42, <=0.6.44) +12 more potentially affected by CVE-2026-9856 via transformers (4.34.1)

transformers PYPI version 4.34.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - antimatter 0.1.3 - autotrain-advanced =0.6.42, =4.3.0, =1.22.0rc1, =1.0.1, =0.1.69, =0.1.73 - spacy-transformers 1.3.2 Source cves:...

adapters (>=0.0.0.dev20231111, <=0.0.0.dev20231116), ag-llama-api-s (0.0.12) +44 more potentially affected by CVE-2026-9856 via transformers (4.33.3)

transformers PYPI version 4.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231111, =0.0.13, =0.0.15, =0.0.29, =0.1.0, =0.3.0, =0.0.1, =0.1.36a0, =1.1.1, =0.1.1, =0.1.5 and more Source cves:...

aitoolbox (>=1.0.0, <=1.1.0), allencv (>=0.1.0, <=0.1.1) +59 more potentially affected by CVE-2026-9856 via transformers (4.20.1)

transformers PYPI version 4.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitoolbox =1.0.0, =0.1.0, =2.10.0, =0.1.0, =0.0.3, =2.10.0, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.2, =0.4.3b20220621, =0.4.3b20220621,...

arctic-training (>=0.0.1, <=0.0.2), bcipy (2.0.1) +13 more potentially affected by CVE-2026-9856 via transformers (4.47.0)

transformers PYPI version 4.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - arctic-training =0.0.1, =0.0.32, =0.3.8.0, =0.1.0, =0.1.3, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source...

decoders (>=0.0.7, <=0.0.12), fast-token-classifier (>=0.1.0, <=0.2.3) +1 more potentially affected by CVE-2026-9856 via transformers (4.32.0)

transformers PYPI version 4.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - decoders =0.0.7, =0.1.0, =0.2.3 - myllm 4.4.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...