avalan (1.1.6), karma-medeval (>=0.1.0, <=0.2.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.53.0)

transformers PYPI version 4.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan 1.1.6 - karma-medeval =0.1.0, =0.3.1, =0.0.1.2, =0.2.0, =0.9.0, =0.2.0, =0.2.2, =0.0.3, =0.0.4 - unimeth 0.0.2 -...

bent (>=0.0.9, <=0.0.27), t5s (>=0.1.0, <=2.0.8) potentially affected by CVE-2026-9856 via transformers (4.9.0)

transformers PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bent =0.0.9, =0.1.0, =2.0.8 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

cog-hf-template (>=0.0.3, <=0.0.5), dbgpt-hub (0.3.1) +9 more potentially affected by CVE-2026-9856 via transformers (4.33.2)

transformers PYPI version 4.33.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cog-hf-template =0.0.3, =0.1.4, =0.3.0, =2.0.14, =0.1.1, =0.1.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

codegaze (0.0.23a0), deep-copilot (>=0.0.5, <=0.0.8) +13 more potentially affected by CVE-2026-9856 via transformers (4.21.3)

transformers PYPI version 4.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - codegaze 0.0.23a0 - deep-copilot =0.0.5, =0.3.2, =0.0.1, =0.0.1a0, =0.0.1, =0.2.1, =0.20.0 - spacy-transformers 1.1.8 -...

apple-silicon-booknlp (1.0.7.1), bcqa (>=1.0.0, <=1.1.4) +10 more potentially affected by CVE-2026-9856 via transformers (4.30.0)

transformers PYPI version 4.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - apple-silicon-booknlp 1.0.7.1 - bcqa =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.1.6, =0.1.0, =0.2.5, =0.1.2, =0.0.1, =0.0.3 Source cves:...

algorin-cli (>=0.0.1, <=0.21.0), autotrain-advanced (>=0.7.2, <=0.7.7) +8 more potentially affected by CVE-2026-9856 via transformers (4.38.1)

transformers PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - algorin-cli =0.0.1, =0.7.2, =0.1.0, =0.0.92, =0.2.5, =2.0.0a12, =0.1.0, =0.1.4 Source cves: CVE-2026-9856 Source advisory:...

autotrain-advanced (>=0.8.26, <=0.8.33), construe (>=0.2.0, <=0.4.0) +17 more potentially affected by CVE-2026-9856 via transformers (4.46.2)

transformers PYPI version 4.46.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.26, =0.2.0, =0.25.0, =1.1.1, =0.1.0, =0.0.9, =0.1.60, =0.1.1, =1.1.3, =0.2.4, =0.1.1, =0.1.4, =2.0.0, =0.1.0,...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2026-9856 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2026-98...

exciton (>=1.4.0, <=1.4.3), leafnlp (0.0.17) +1 more potentially affected by CVE-2026-9856 via transformers (4.11.2)

transformers PYPI version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - exciton =1.4.0, =0.0.3, =0.0.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-9856 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

any4any (0.1.1), bertnado (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-9856 via transformers (4.51.0)

transformers PYPI version 4.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - any4any 0.1.1 - bertnado =0.1.0, =0.0.0, =0.4.11, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

ammico-lavis (>=1.0.2.1, <=1.0.2.2), aniemore (1.2.3) +35 more potentially affected by CVE-2026-9856 via transformers (4.26.1)

transformers PYPI version 4.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis =1.0.2.1, =0.6.3b20230204, =0.0.2, =0.0.4, =0.6.1, =0.0.1, =0.1.1, =1.6.0.dev202305310417, =0.0.1, =2.0.0, =2.1.1 and more...

avalan (>=1.0.5, <=1.1.5), deepmost (0.5.2) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.3)

transformers PYPI version 4.52.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.0.5, =0.1.2, =0.0.0, =0.8.2, =1.3.0, =0.2.0, =0.1.8, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX...

booknlp2 (>=1.0.0, <=1.0.1), classy-core (>=0.1.0.dev20211019, <=0.2.1) +10 more potentially affected by CVE-2026-9856 via transformers (4.11.3)

transformers PYPI version 4.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - booknlp2 =1.0.0, =0.1.0.dev20211019, =0.1.0, =1.2.0, =0.3.0, =1.1.0.dev4, =1.1.0, =1.2.0 - zensols-mednlp 0.0.1 Source cves:...

chatglm6bpkg (0.0.1), instruction-ner (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-9856 via transformers (4.27.1)

transformers PYPI version 4.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chatglm6bpkg 0.0.1 - instruction-ner =0.1.3, =0.1.6 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

anyclassifier (>=0.1.1, <=0.2.0), autotrain-advanced (>=0.7.30, <=0.7.43) +3 more potentially affected by CVE-2026-9856 via transformers (4.39.0)

transformers PYPI version 4.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - anyclassifier =0.1.1, =0.7.30, =0.1.3, =0.2.3, =0.2.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

chain-guardrail (>=0.0.10, <=0.0.11), dulu (0.1.4) +10 more potentially affected by CVE-2026-9856 via transformers (4.42.3)

transformers PYPI version 4.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chain-guardrail =0.0.10, =0.1.3, =1.0.1, =0.0.5, =0.3.4, =1.0.0, =2.5.9, =2.6.2 Source cves: CVE-2026-9856 Source advisory:...

augly-jp (>=2021.9.6, <=2021.9.26), biome-text (3.3.0) +10 more potentially affected by CVE-2026-9856 via transformers (4.9.2)

transformers PYPI version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - augly-jp =2021.9.6, =1.2.1, =0.1.0, =1.0.4, =1.0.6 - tkittagger 0.0.0.2 - wafl 0.0.1 - zero-shot-re 0.0.4 Source cves: CVE-2026-9856...

slp (>=1.2.0, <=1.2.1) potentially affected by CVE-2026-9856 via transformers (4.3.0)

transformers PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - slp =1.2.0, =1.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

banglanlptoolkit (>=1.1.7.dev4, <=1.1.8), contextqa (>=2.0.0, <=2.0.5) +27 more potentially affected by CVE-2026-9856 via transformers (4.42.4)

transformers PYPI version 4.42.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - banglanlptoolkit =1.1.7.dev4, =2.0.0, =0.0.71, =0.0.1b2, =0.5.0rc0, =0.2.0, =1.0.0, =0.9.3, =0.1.0, =1.0.0, =0.1.0, =0.1.1 and more...