serverless-llm-store (0.5.0), turbo-alignment (0.0.2) potentially affected by CVE-2026-9856 via transformers (4.42.0)

transformers PYPI version 4.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - serverless-llm-store 0.5.0 - turbo-alignment 0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

any4any (0.1.1), bertnado (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-9856 via transformers (4.51.0)

transformers PYPI version 4.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - any4any 0.1.1 - bertnado =0.1.0, =0.0.0, =0.4.11, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aait (>=1.0.0.0, <=2.3.14), adapters (1.2.0) +87 more potentially affected by CVE-2026-9856 via transformers (4.51.3)

transformers PYPI version 4.51.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aait =1.0.0.0, =0.3.16, =0.1.0, =0.6.1, =0.1.0, =0.1.1, =0.1.122 - colpali-engine 0.3.10 - coqui-tts 0.26.2 - dadmatools 2.3.0 and more...

dynamic-prompting (>=0.2.4, <=0.2.6), embedprepro (>=0.1.0, <=0.12.0) +6 more potentially affected by CVE-2026-9856 via transformers (4.41.1)

transformers PYPI version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dynamic-prompting =0.2.4, =0.1.0, =4.2.4, =0.1.0, =0.0.23, =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...

chain-guardrail (>=0.0.10, <=0.0.11), dulu (0.1.4) +10 more potentially affected by CVE-2026-9856 via transformers (4.42.3)

transformers PYPI version 4.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chain-guardrail =0.0.10, =0.1.3, =1.0.1, =0.0.5, =0.3.4, =1.0.0, =2.5.9, =2.6.2 Source cves: CVE-2026-9856 Source advisory:...

autotrain-advanced (>=0.8.7, <=0.8.8), bloombee (>=0.1.1, <=0.1.3) +7 more potentially affected by CVE-2026-9856 via transformers (4.43.1)

transformers PYPI version 4.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.7, =0.1.1, =1.0.0, =1.1.28.14, =0.1.0, =0.3.8, =1.1.0, =1.2.2 - turbo-alignment 0.0.4 Source cves: CVE-2026-985...

ads-and (0.1.3), ads-bib (>=0.1.0, <=0.3.3) +39 more potentially affected by CVE-2026-9856 via transformers (4.56.2)

transformers PYPI version 4.56.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ads-and 0.1.3 - ads-bib =0.1.0, =0.8.0, =0.1.0, =2.0.0rc2, =0.1.0, =0.15.5, =0.1.1, =0.13.2, =1.0.3.post1.dev0, =1.0.0, =1.0.5 and more...

aiu-fms-testing-utils (>=0.2.1, <=0.2.2), avalan (>=1.2.16, <=1.3.10) +2 more potentially affected by CVE-2026-9856 via transformers (4.55.0)

transformers PYPI version 4.55.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiu-fms-testing-utils =0.2.1, =1.2.16, =1.3.10 - live-translation 0.9.0 - vail-model-registry 0.1.12 Source cves: CVE-2026-9856 Source...

airunner (>=4.1.2, <=4.11.3), auto-swagger (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2026-9856 via transformers (4.55.4)

transformers PYPI version 4.55.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =4.1.2, =0.1.0, =0.4.6, =0.1.1, =0.2.7, =0.1.5, =0.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 and more Source cves:...

amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.1)

transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...

avalan (>=1.0.5, <=1.1.5), deepmost (0.5.2) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.3)

transformers PYPI version 4.52.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.0.5, =0.1.2, =0.0.0, =0.8.2, =1.3.0, =0.2.0, =0.1.8, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX...

appcategorizer (>=0.1.0, <=0.2.2), bicleaner-ai (>=3.3.1, <=3.4.0) +38 more potentially affected by CVE-2026-9856 via transformers (4.52.4)

transformers PYPI version 4.52.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - appcategorizer =0.1.0, =3.3.1, =0.1.1, =0.5.7, =0.2.13, =3.0.0, =3.0.0rc1, =0.4.0, =0.1.1, =1.1.0, =0.0.3, =0.0.6 and more Source cves:...

avalan (1.1.6), karma-medeval (>=0.1.0, <=0.2.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.53.0)

transformers PYPI version 4.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan 1.1.6 - karma-medeval =0.1.0, =0.3.1, =0.0.1.2, =0.2.0, =0.9.0, =0.2.0, =0.2.2, =0.0.3, =0.0.4 - unimeth 0.0.2 -...

avalan (>=1.2.0, <=1.2.13), mcp-instana (0.1.1) +4 more potentially affected by CVE-2026-9856 via transformers (4.53.1)

transformers PYPI version 4.53.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.2.0, =0.8.6, =0.9.2a0, =0.9.1a0, =0.9.2 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

alignment-handbook (0.1.0), geniebottle (0.0.3) +7 more potentially affected by CVE-2026-9856 via transformers (4.37.1)

transformers PYPI version 4.37.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - alignment-handbook 0.1.0 - geniebottle 0.0.3 - llm-docstring-generator 1.0.0 - lmdeploy =0.2.3, =0.0.2, =0.0.6, =0.0.7 - video2dataset...

anyclassifier (>=0.1.1, <=0.2.0), autotrain-advanced (>=0.7.30, <=0.7.43) +3 more potentially affected by CVE-2026-9856 via transformers (4.39.0)

transformers PYPI version 4.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - anyclassifier =0.1.1, =0.7.30, =0.1.3, =0.2.3, =0.2.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

agentcraft-mcp (0.1.0), apteryx-transformers (>=0.1.1, <=0.1.5) +38 more potentially affected by CVE-2026-9856 via transformers (4.53.2)

transformers PYPI version 4.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agentcraft-mcp 0.1.0 - apteryx-transformers =0.1.1, =0.0.2, =0.0.8, =0.0.2, =1.0.1, =0.0.5, =0.1.2, =0.4.2, =0.4.1, =0.1.2, =1.1.7,...

aiforthechurch (0.1.0), attention-sinks (>=0.2.2, <=0.4.0) +12 more potentially affected by CVE-2026-9856 via transformers (4.34.0)

transformers PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiforthechurch 0.1.0 - attention-sinks =0.2.2, =0.1.66, =2.2.0, =0.0.13, =0.1.0, =0.1.0, =0.2.0rc8, =1.0.0, =0.1.0, =0.2.0 - urag 0.0.1...

adapters (>=0.0.0.dev20231123, <=0.1.1), alexandra-ai (0.1.0) +50 more potentially affected by CVE-2026-9856 via transformers (4.35.2)

transformers PYPI version 4.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231123, =0.2.0, =0.6.45, =2.24.4, =0.1.1, =0.1.3, =0.1.105, =1.23.0rc1, =0.1.0rc1, =0.0.5, =0.3.11, =0.3.17 and mo...

academic-emotion (0.1.2), aqlm (>=1.0.0, <=1.0.1) +10 more potentially affected by CVE-2026-9856 via transformers (4.37.0)

transformers PYPI version 4.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - academic-emotion 0.1.2 - aqlm =1.0.0, =0.6.81, =1.1.0, =3.6.1, =0.1.1, =0.1.3, =0.0.4, =0.2.1, =0.10.0, =0.18.2 Source cves:...