ROOT-APP-PYPI-GHSA-4GG8-GXPX-9RPH GHSA-4gg8-gxpx-9rph in uv - Patched by Root

Root has patched GHSA-4gg8-gxpx-9rph in the uv package for Root:PyPI. Multiple fixed versions available...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +924 more potentially affected by CVE-2026-12259 via nltk (>=3.0.0, <=3.9.4)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12259 Source advisory: SNYK:PYTHON-NLTK-19639601...

ROOT-APP-PYPI-CVE-2026-48782 CVE-2026-48782 in pydantic-ai-slim - Patched by Root

Root has patched CVE-2026-48782 in the pydantic-ai-slim package for Root:PyPI. Multiple fixed versions available...

codegaze (0.0.23a0), deep-copilot (>=0.0.5, <=0.0.8) +13 more potentially affected by CVE-2026-9856 via transformers (4.21.3)

transformers PYPI version 4.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - codegaze 0.0.23a0 - deep-copilot =0.0.5, =0.3.2, =0.0.1, =0.0.1a0, =0.0.1, =0.2.1, =0.20.0 - spacy-transformers 1.1.8 -...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-9856...

agent-memory-jojo (0.1.3), airunner (>=3.2.0, <=4.1.1) +45 more potentially affected by CVE-2026-9856 via transformers (4.50.3)

transformers PYPI version 4.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agent-memory-jojo 0.1.3 - airunner =3.2.0, =0.1.0, =0.4.3, =0.0.3, =0.2.2, =0.1.0, =0.20.0, =1.0.9, =0.6.4, =2.8.0rc1, =2.8.2 and more...

apple-silicon-booknlp (1.0.7.1), bcqa (>=1.0.0, <=1.1.4) +10 more potentially affected by CVE-2026-9856 via transformers (4.30.0)

transformers PYPI version 4.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - apple-silicon-booknlp 1.0.7.1 - bcqa =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.1.6, =0.1.0, =0.2.5, =0.1.2, =0.0.1, =0.0.3 Source cves:...

ktrain (0.31.2), mt-telescope (0.0.2) +7 more potentially affected by CVE-2026-9856 via transformers (4.10.3)

transformers PYPI version 4.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktrain 0.31.2 - mt-telescope 0.0.2 - paoding 0.1.1 - reading4listeners =0.0.2b0, =0.0.1rc1, =0.0.1rc0, =1.1.0.dev0, =1.0.0rc6, =1.0.1...

banglanlptoolkit (>=1.1.7.dev4, <=1.1.8), contextqa (>=2.0.0, <=2.0.5) +27 more potentially affected by CVE-2026-9856 via transformers (4.42.4)

transformers PYPI version 4.42.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - banglanlptoolkit =1.1.7.dev4, =2.0.0, =0.0.71, =0.0.1b2, =0.5.0rc0, =0.2.0, =1.0.0, =0.9.3, =0.1.0, =1.0.0, =0.1.0, =0.1.1 and more...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-9856 via transformers (4.21.0)

transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

airunner (>=3.1.8, <=3.1.14), ano-code (>=1.1.39, <=8.0.34) +19 more potentially affected by CVE-2026-9856 via transformers (4.48.1)

transformers PYPI version 4.48.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =3.1.8, =1.1.39, =3.1.6, =0.0.1, =1.0.0, =0.1.0, =2.6.0rc1, =0.1.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.3.2 -...

archit (>=2026.3.1, <=2026.4.1), argilla-plugins (>=0.1.2, <=0.1.3) +70 more potentially affected by CVE-2026-9856 via transformers (4.49.0)

transformers PYPI version 4.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - archit =2026.3.1, =0.1.2, =1.3.2b20250620, =1.2.1b20250404, =1.2.1b20250404, =0.1.2, =1.1.6, =0.1.0, =2.7.6, =0.39.0, =0.1.3, =0.1.40 a...

autotrain-advanced (>=0.8.26, <=0.8.33), construe (>=0.2.0, <=0.4.0) +17 more potentially affected by CVE-2026-9856 via transformers (4.46.2)

transformers PYPI version 4.46.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.26, =0.2.0, =0.25.0, =1.1.1, =0.1.0, =0.0.9, =0.1.60, =0.1.1, =1.1.3, =0.2.4, =0.1.1, =0.1.4, =2.0.0, =0.1.0,...

aait (0.0.4.80), adore (>=0.0.1, <=0.1.2) +108 more potentially affected by CVE-2026-9856 via transformers (4.46.3)

transformers PYPI version 4.46.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aait 0.0.4.80 - adore =0.0.1, =5.0.0, =5.0.0, =0.1.8, =0.1.3, =26.5.1, =0.1.0, =0.1.0, =0.1.6 - chatterbox-tts-api 1.0.0 and more Sourc...

arctic-training (>=0.0.1, <=0.0.2), bcipy (2.0.1) +13 more potentially affected by CVE-2026-9856 via transformers (4.47.0)

transformers PYPI version 4.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - arctic-training =0.0.1, =0.0.32, =0.3.8.0, =0.1.0, =0.1.3, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source...

adapters (1.0.0), airunner (>=3.0.0, <=3.1.7) +13 more potentially affected by CVE-2026-9856 via transformers (4.43.4)

transformers PYPI version 4.43.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.0.0 - airunner =3.0.0, =1.5.3, =0.0.10, =0.0.0, =0.11.0, =0.1.2, =0.4.6, =2.2.4, =1.21.3, =1.13.0, =1.18.2, =1.0.7, =1.1.14 ...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-9856 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

abgpt (>=0.1.1, <=0.1.2), adaptive-reranker (>=0.1.0, <=0.1.1) +81 more potentially affected by CVE-2026-9856 via transformers (4.44.2)

transformers PYPI version 4.44.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - abgpt =0.1.1, =0.1.0, =0.1.0, =0.8.16, =0.0.2, =0.5.4, =0.3.3, =2.6.0b1, =0.1.2, =0.1.16, =0.0.1.dev1, =0.0.2, =0.0.6 - craftext 0.2.2...

bluecore-models (>=0.11.1, <=0.25.0), orilinx (1.0.1) potentially affected by CVE-2026-9856 via transformers (4.57.5)

transformers PYPI version 4.57.5 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bluecore-models =0.11.1, =0.25.0 - orilinx 1.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +1884 more potentially affected by CVE-2026-9856 via transformers (4.57.6)

transformers PYPI version 4.57.6 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - a62-emotion =0.10.11, =0.5.5, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-9856 Source...