autotrain-advanced (>=0.6.52, <=0.6.80), bicleaner-ai (>=3.0.1, <=3.2.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.36.1)

transformers PYPI version 4.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.52, =3.0.1, =0.1.4, =0.0.2, =0.0.12 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-9856...

aiforthechurch (0.1.0), attention-sinks (>=0.2.2, <=0.4.0) +12 more potentially affected by CVE-2026-9856 via transformers (4.34.0)

transformers PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiforthechurch 0.1.0 - attention-sinks =0.2.2, =0.1.66, =2.2.0, =0.0.13, =0.1.0, =0.1.0, =0.2.0rc8, =1.0.0, =0.1.0, =0.2.0 - urag 0.0.1...

aait (>=1.0.0.0, <=2.3.14), adapters (1.2.0) +88 more potentially affected by CVE-2026-9856 via transformers (4.51.3)

transformers PYPI version 4.51.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aait =1.0.0.0, =0.3.16, =0.1.0, =0.6.1, =0.1.0, =0.1.1, =0.1.122 - colpali-engine 0.3.10 - coqui-tts 0.26.2 - dadmatools 2.3.0 and more...

appcategorizer (>=0.1.0, <=0.2.2), bicleaner-ai (>=3.3.1, <=3.4.0) +38 more potentially affected by CVE-2026-9856 via transformers (4.52.4)

transformers PYPI version 4.52.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - appcategorizer =0.1.0, =3.3.1, =0.1.1, =0.5.7, =0.2.13, =3.0.0, =3.0.0rc1, =0.4.0, =0.1.1, =1.1.0, =0.0.3, =0.0.6 and more Source cves:...

adapters (>=0.0.0.dev20231123, <=0.1.1), aiconfig-extension-llama-guard (>=0.0.1, <=0.0.3) +51 more potentially affected by CVE-2026-9856 via transformers (4.35.2)

transformers PYPI version 4.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231123, =0.0.1, =0.2.0, =0.6.45, =2.24.4, =0.1.1, =0.1.3, =0.1.105, =1.23.0rc1, =0.1.0rc1, =0.0.5, =1.0.4 and more...

archit (>=2026.3.1, <=2026.4.1), autogluon (>=1.3.2b20250620, <=1.4.1b20251204) +64 more potentially affected by CVE-2026-9856 via transformers (4.49.0)

transformers PYPI version 4.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - archit =2026.3.1, =1.3.2b20250620, =1.2.1b20250404, =1.2.1b20250404, =0.1.2, =2.7.6, =0.39.0, =0.1.3, =0.0.1, =2.1.0rc1, =1.0.0, =0.0.1...

academic-emotion (0.1.2), aqlm (>=1.0.0, <=1.0.1) +10 more potentially affected by CVE-2026-9856 via transformers (4.37.0)

transformers PYPI version 4.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - academic-emotion 0.1.2 - aqlm =1.0.0, =0.6.81, =1.1.0, =3.6.1, =0.1.1, =0.1.3, =0.0.4, =0.2.1, =0.10.0, =0.18.2 Source cves:...

agentcraft-mcp (0.1.0), apteryx-transformers (>=0.1.1, <=0.1.5) +44 more potentially affected by CVE-2026-9856 via transformers (4.53.2)

transformers PYPI version 4.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agentcraft-mcp 0.1.0 - apteryx-transformers =0.1.1, =0.1.2, =0.0.2, =0.0.8, =0.0.2, =1.0.1, =1.1.6, =0.1.0, =0.0.5, =0.1.2, =0.4.2,...

bert-summarizer (0.0.6) potentially affected by CVE-2026-9856 via transformers (4.0.0rc1)

transformers PYPI version 4.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bert-summarizer 0.0.6 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

mengzi-zero-shot (>=0.1.0, <=0.2.1), nalcos (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-9856 via transformers (4.10.1)

transformers PYPI version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - mengzi-zero-shot =0.1.0, =0.1.1, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-9856 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

agixt (>=1.3.84, <=1.3.106), ai-dive (0.0.1) +8 more potentially affected by CVE-2026-9856 via transformers (4.30.1)

transformers PYPI version 4.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agixt =1.3.84, =1.15.3, =1.16.3, =0.0.1, =1.18.0rc1, =0.2.22, =0.2.32 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX...

dynamic-prompting (>=0.2.4, <=0.2.6), embedprepro (>=0.1.0, <=0.12.0) +6 more potentially affected by CVE-2026-9856 via transformers (4.41.1)

transformers PYPI version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dynamic-prompting =0.2.4, =0.1.0, =4.2.4, =0.1.0, =0.0.23, =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...

nemo-toolkit (1.2.0), ratsnlp (0.0.9993) +1 more potentially affected by CVE-2026-9856 via transformers (4.8.1)

transformers PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nemo-toolkit 1.2.0 - ratsnlp 0.0.9993 - summac =0.0.1, =0.0.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.1)

transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...

chemical-converters (0.1.2), dora-phi4 (>=0.0.0, <=0.3.13) +14 more potentially affected by CVE-2026-9856 via transformers (4.48.2)

transformers PYPI version 4.48.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chemical-converters 0.1.2 - dora-phi4 =0.0.0, =0.1.10, =0.1.2, =0.13.3, =0.1.0, =0.0.7, =1.2.3, =0.5.8, =0.1.0, =0.8.2, =0.1.2, =1.1.5,...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-9856 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

allencv (>=0.1.2, <=0.1.3), allennlp (>=1.4.0, <=2.0.2.dev20210209) +25 more potentially affected by CVE-2026-9856 via transformers (4.2.2)

transformers PYPI version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allencv =0.1.2, =1.4.0, =0.0.3, =1.4.0, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.3.4, =0.1.0, =0.2.0 - model-hub 0.1.0.dev0 and more Source...

autotrain-advanced (>=0.8.7, <=0.8.8), bloombee (>=0.1.1, <=0.1.3) +7 more potentially affected by CVE-2026-9856 via transformers (4.43.1)

transformers PYPI version 4.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.7, =0.1.1, =1.0.0, =1.1.28.14, =0.1.0, =0.3.8, =1.1.0, =1.2.2 - turbo-alignment 0.0.4 Source cves: CVE-2026-985...