chatglm6bpkg (0.0.1), instruction-ner (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-9856 via transformers (4.27.1)

transformers PYPI version 4.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chatglm6bpkg 0.0.1 - instruction-ner =0.1.3, =0.1.6 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

azureml-automl-dnn-nlp (>=1.48.0, <=1.53.0) potentially affected by CVE-2026-9856 via transformers (4.16.0)

transformers PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.48.0, =1.53.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

pvqa (0.0.2.1) potentially affected by CVE-2026-9856 via transformers (2.1.1)

transformers PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - pvqa 0.0.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

allennlp (>=1.0.0rc4.dev20200513, <=1.0.0rc6.dev20200601), allennlp-models (>=1.0.0rc4, <=1.0.0rc5) potentially affected by CVE-2026-9856 via transformers (2.9.1)

transformers PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc4.dev20200513, =1.0.0rc4, =1.0.0rc5 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

blanc (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-9856 via transformers (2.4.0)

transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - blanc =0.1.0, =0.1.5 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

bluecore-models (>=0.11.1, <=0.25.0), orilinx (1.0.1) potentially affected by CVE-2026-9856 via transformers (4.57.5)

transformers PYPI version 4.57.5 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bluecore-models =0.11.1, =0.25.0 - orilinx 1.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

africanwhisper (0.2.1), agi-med-metrics (>=0.0.1, <=0.0.7) +50 more potentially affected by CVE-2026-9856 via transformers (4.38.2)

transformers PYPI version 4.38.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - africanwhisper 0.2.1 - agi-med-metrics =0.0.1, =0.1.9, =4.5.10.dev202403140317, =1.0.1b20240321, =1.0.1b20240321, =0.7.8, =0.2.0,...

aihandler (>=1.10.3, <=1.15.6), airunner (>=1.11.0, <=1.16.9) +5 more potentially affected by CVE-2026-9856 via transformers (4.29.1)

transformers PYPI version 4.29.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.10.3, =1.11.0, =1.17.0rc1, =1.17.2 - instruct-qa 0.0.3rc1 - konta-test 0.1.0 - konta-testing 0.1.0 - vietlm 0.1.0 Source...

allennlp (>=1.1.0rc1.dev20200710, <=1.1.0), allennlp-models (>=1.1.0rc1, <=1.1.0) +26 more potentially affected by CVE-2026-9856 via transformers (3.0.2)

transformers PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.1.0rc1.dev20200710, =1.1.0rc1, =0.7.1, =0.0.1, =0.1.0, =0.4.6, =1.9.0, =0.0.1.dev0, =0.3.1, =0.1.0, =0.1.3 and more Source...

adaptor (>=0.2.1, <=0.2.2) potentially affected by CVE-2026-9856 via transformers (4.19.1)

transformers PYPI version 4.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptor =0.2.1, =0.2.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.21.2)

transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-9856 Source advisory:...

addownloader (>=0.2.5, <=0.2.11), anab-ai-toolkit (0.1.0.dev1) +32 more potentially affected by CVE-2026-9856 via transformers (4.37.2)

transformers PYPI version 4.37.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - addownloader =0.2.5, =2.0.4, =2.0.1, =0.1.2, =0.1.2, =0.1.1, =1.25.0rc1, =0.9.0, =0.0.0, =3.6.3rc1, =3.7.0 - lmms-eval 0.1.1 and more...

adapters (1.1.0), advtok (0.0.2) +44 more potentially affected by CVE-2026-9856 via transformers (4.47.1)

transformers PYPI version 4.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.0 - advtok 0.0.2 - akasha-terminal =0.9.0, =0.1.0, =1.3.0, =0.3.7, =2.1.7, =0.0.1, =1.0.0, =0.1.2, =0.1.55, =0.1.62 and mo...

allennlp (2.9.3), allennlp-models (>=2.9.0, <=2.9.3) +21 more potentially affected by CVE-2026-9856 via transformers (4.18.0)

transformers PYPI version 4.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 2.9.3 - allennlp-models =2.9.0, =0.3.1, =0.2.9, =1.1.1, =0.12.0, =2.0.0, =1.0.0b1, =0.1.0, =0.1.1, =0.1.0, =1.0.1 -...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +772 more potentially affected by CVE-2026-76217 via gitpython (>=3.0.0, <=3.1.57)

gitpython PYPI version =3.0.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-76217 Source advisory: OSV:PYSEC-2026-3841...

agentiacap (>=0.1.2, <=0.1.10), agntrick-whatsapp (>=0.2.0, <=0.3.7) +89 more potentially affected by CVE-2026-55236 via langgraph-api (>=0.0.22, <=0.9.1)

langgraph-api PYPI version =0.0.22, =0.1.2, =0.2.0, =0.0.1, =0.1.1, =0.1.4, =0.1.3, =1.0.0, =0.1.0, =0.1.0, =0.2.2, =0.3.0b1, =0.1.24rc7, =0.1.2, =0.1.32 - universal-mcp-ahrefs 0.1.1 and more Source cves: CVE-2026-55236 Source advisory: OSV:PYSEC-2026-3858...

ac-solver (0.1.0), acedeploy (>=2.4.15, <=2.4.366.dev1) +772 more potentially affected by CVE-2026-76218 via gitpython (>=3.0.0, <=3.1.57)

gitpython PYPI version =3.0.0, =2.4.15, =2025.10.17, =0.4.0, =0.4.0, =1.2.3, =0.4.7, =0.4.7, =0.2.0, =0.1.8, =0.87.2.dev9, =0.5.0, =0.1.0.dev19, =1.3.0, =2.0.3 and more Source cves: CVE-2026-76218 Source advisory: OSV:PYSEC-2026-3840...

freedom (>=0.0.0_21_g3038804_dirty, <=0.0.1) potentially affected by CVE-2026-76217 via gitpython (0.3.4)

gitpython PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - freedom =0.0.021g3038804dirty, =0.0.1 Source cves: CVE-2026-76217 Source advisory: OSV:PYSEC-2026-3841...

bento-cli (>=0.1.0, <=0.1.1), walletlib (0.1.0) potentially affected by CVE-2026-76218 via gitpython (2.1.14)

gitpython PYPI version 2.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bento-cli =0.1.0, =0.1.1 - walletlib 0.1.0 Source cves: CVE-2026-76218 Source advisory: OSV:PYSEC-2026-3840...

airflow-indexima (>=1.0.1, <=2.2.1), arcli (>=0.1.0, <=0.1.1) +69 more potentially affected by CVE-2026-76218 via gitpython (2.1.15)

gitpython PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - airflow-indexima =1.0.1, =0.1.0, =0.3.0rc1, =0.1.0, =0.7.0, =0.2.0, =0.11.0, =0.1.0, =0.6.0, =0.3.0, =2.0.0, =2019.2.3rc0, =2021.7.0 and more...