abmarl (>=0.2.0, <=0.2.2), aliby (0.1.16) +5 more potentially affected by CVE-2026-57516 via ray (1.4.0)

ray PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.0, =0.1.4, =1.3.0, =1.4.10, =2021.6.22.dev0, =2021.7.1.dev0 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

gen2-connector (1.0.0b60), pynb-dag-runner (>=0.0.6, <=0.0.9) +2 more potentially affected by CVE-2026-57516 via ray (1.9.1)

ray PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - gen2-connector 1.0.0b60 - pynb-dag-runner =0.0.6, =0.0.4.dev1661688916, =0.0.4, =0.0.6 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR4...

hydra-ray-launcher (1.2.0), ray-on-aml (>=0.1.8, <=0.2.1) +1 more potentially affected by CVE-2026-57516 via ray (1.12.0)

ray PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - hydra-ray-launcher 1.2.0 - ray-on-aml =0.1.8, =0.2.1 - txp 0.2.17 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2026-57516 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

actorch (>=0.0.3, <=0.0.5), aliby (>=0.1.18, <=0.1.55) +38 more potentially affected by CVE-2026-57516 via ray (1.13.0)

ray PYPI version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - actorch =0.0.3, =0.1.18, =0.1.11, =0.1.3, =0.4.3b20220618, =0.4.3b20220618, =0.4.3b20220618, =0.0.14, =11.1.0, =0.1.0, =0.2.0, =0.0.1, =0.0.9, =0.1.3 and...

biome-text (>=3.0.0, <=3.2.1), deepcomp (>=1.2.4, <=1.2.5) +7 more potentially affected by CVE-2026-57516 via ray (1.3.0)

ray PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - biome-text =3.0.0, =1.2.4, =0.4.2rc0, =0.0.7, =0.2.0, =2021.6.12.dev0, =2021.6.17.dev0 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR4...

atomgit (>=1.0.5, <=1.0.17), axolotl (0.13.0.dev0) +6 more potentially affected by CVE-2026-66007 via datasets (4.4.1)

datasets PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - atomgit =1.0.5, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.9.0.4 - multimodal-parsers 0.1.6 - shifaa 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

abliterix (>=1.1.0, <=1.12.2), adasoft (>=0.1.0, <=0.1.1) +179 more potentially affected by CVE-2026-66007 via datasets (4.8.5)

datasets PYPI version 4.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - abliterix =1.1.0, =0.1.0, =0.2.14, =2.0.4, =0.1.0, =0.0.7, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0a20250502,...

axolotl (>=0.18.0, <=0.20.0), clawperf (>=0.1.0, <=0.6.1) +23 more potentially affected by CVE-2026-66007 via datasets (4.8.4)

datasets PYPI version 4.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - axolotl =0.18.0, =0.1.0, =3.2.0, =0.5.0rc0, =0.1.18, =0.0.4, =1.0.0, =2.0.0, =0.3.0, =0.3.0, =0.4.1, =0.4.3 - loadpup 1.0.0 - meepsquared 0.1.0...

ainyan (>=1.0.0, <=1.0.79), alignment-handbook (0.2.0) +6 more potentially affected by CVE-2026-66007 via datasets (2.14.6)

datasets PYPI version 2.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - ainyan =1.0.0, =2.0.7, =0.1.9, =0.1.5, =1.0.0, =1.1.0 - nlpbaselines 0.0.26 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H5...

axolotl (0.5.0), commit0 (>=0.1.7, <=0.1.8) +7 more potentially affected by CVE-2026-66007 via datasets (3.0.1)

datasets PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - axolotl 0.5.0 - commit0 =0.1.7, =0.6.0rc0, =0.2.1, =2.9.0, =2.9.0, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-66007 Source advisory:...

arthur-bench (>=0.2.0, <=0.2.3), atradebot (0.1.0) +23 more potentially affected by CVE-2026-66007 via datasets (2.19.1)

datasets PYPI version 2.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - arthur-bench =0.2.0, =0.7.64, =0.1.6, =0.0.1, =0.0.1, =0.4.9.dev3, =1.2.3, =1.0.2, =0.7.3a0, =2025.1.0rc0, =0.1.3, =3.0.1rc2, =5.3.1rc1 and mor...

africanwhisper (>=0.2.1, <=0.2.5), audioaugmentor (>=0.0.1, <=0.1.1) +8 more potentially affected by CVE-2026-66007 via datasets (2.17.1)

datasets PYPI version 2.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - africanwhisper =0.2.1, =0.0.1, =0.0.1, =0.1.3, =1.0.2, =1.1.0, =0.1.0, =0.1.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6...

flagembedding (1.3.2), lavague (1.0.10) +2 more potentially affected by CVE-2026-66007 via datasets (2.19.0)

datasets PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - flagembedding 1.3.2 - lavague 1.0.10 - radeval =0.0.1rc6, =0.0.1, =0.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

autotrain-advanced (>=0.6.15, <=0.7.63), cfg-analysis-tool-py (0.1.0) +35 more potentially affected by CVE-2026-66007 via datasets (2.14.7)

datasets PYPI version 2.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autotrain-advanced =0.6.15, =0.1.3, =0.1.3, =0.1.1, =0.0.1rc7, =0.1.0, =2.1.4, =0.2.0, =2024.3.4, =0.0.66, =2.3.1, =0.1.0.dev0, =0.1.0.1 and mo...

adaptnlp (>=0.3.6, <=0.3.7), artificial-detection (0.1.0) +2 more potentially affected by CVE-2026-66007 via datasets (1.15.1)

datasets PYPI version 1.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - adaptnlp =0.3.6, =0.3.7 - artificial-detection 0.1.0 - lm-eval 0.2.0 - tailor-nlp 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

dataquality (>=0.8.7a0, <=0.8.12), internet-nlp (0.0.9) +1 more potentially affected by CVE-2026-66007 via datasets (2.6.1)

datasets PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - dataquality =0.8.7a0, =1.0.0.4, =1.0.0.6 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

autocontrastive-gen (0.2.0), cnlp-transformers (>=0.4.0rc1, <=0.6.1) +8 more potentially affected by CVE-2026-66007 via datasets (2.4.0)

datasets PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autocontrastive-gen 0.2.0 - cnlp-transformers =0.4.0rc1, =1.0.1, =0.0.23, =0.0.1a0, =0.3.7, =0.0.10, =0.0.13 - zeldarose 0.6.0 Source cves:...

medcat (>=1.0.0.dev32, <=1.0.0.dev45) potentially affected by CVE-2026-66007 via datasets (1.3.0)

datasets PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - medcat =1.0.0.dev32, =1.0.0.dev45 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

hyfi (>=0.16.0, <=1.10.0), hyfi-template (>=0.3.14, <=0.4.0) +6 more potentially affected by CVE-2026-66007 via datasets (2.13.1)

datasets PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - hyfi =0.16.0, =0.3.14, =0.0.2, =0.0.1, =0.0.6 - rnaformer 0.0.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...