azureml-automl-dnn-nlp (>=1.48.0, <=1.53.0) potentially affected by CVE-2026-9856 via transformers (4.16.0)

transformers PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.48.0, =1.53.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aitoolbox (>=1.0.0, <=1.1.0), allencv (>=0.1.0, <=0.1.1) +59 more potentially affected by CVE-2026-9856 via transformers (4.20.1)

transformers PYPI version 4.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitoolbox =1.0.0, =0.1.0, =2.10.0, =0.1.0, =0.0.3, =2.10.0, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.2, =0.4.3b20220621, =0.4.3b20220621,...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-9856 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

fast-tts (0.0.3), few-shot-priming (>=0.0.14, <=0.0.226) potentially affected by CVE-2026-9856 via transformers (4.19.0)

transformers PYPI version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - fast-tts 0.0.3 - few-shot-priming =0.0.14, =0.0.226 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-9856 Source advisory:...

allennlp (2.9.2), classy-core (>=0.3.0.dev20220423, <=0.3.2) +15 more potentially affected by CVE-2026-9856 via transformers (4.17.0)

transformers PYPI version 4.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 2.9.2 - classy-core =0.3.0.dev20220423, =0.0.1, =0.0.11, =1.1.9, =0.1.0, =1.1.18, =0.7.0, =1.0.1a2, =1.0.2.1 and more Source...

nemo-toolkit (1.2.0), ratsnlp (0.0.9993) +1 more potentially affected by CVE-2026-9856 via transformers (4.8.1)

transformers PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nemo-toolkit 1.2.0 - ratsnlp 0.0.9993 - summac =0.0.1, =0.0.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allencv (>=0.1.2, <=0.1.3), allennlp (>=1.4.0, <=2.0.2.dev20210209) +25 more potentially affected by CVE-2026-9856 via transformers (4.2.2)

transformers PYPI version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allencv =0.1.2, =1.4.0, =0.0.3, =1.4.0, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.3.4, =0.1.0, =0.2.0 - model-hub 0.1.0.dev0 and more Source...

slp (>=1.2.0, <=1.2.1) potentially affected by CVE-2026-9856 via transformers (4.3.0)

transformers PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - slp =1.2.0, =1.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

dadmatools (>=1.1.1.dev2, <=1.5.1), databalancer (>=0.0.7, <=0.0.8) +1 more potentially affected by CVE-2026-9856 via transformers (4.9.1)

transformers PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dadmatools =1.1.1.dev2, =0.0.7, =0.3.0, =0.3.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

augly-jp (>=2021.9.6, <=2021.9.26), biome-text (3.3.0) +10 more potentially affected by CVE-2026-9856 via transformers (4.9.2)

transformers PYPI version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - augly-jp =2021.9.6, =1.2.1, =0.1.0, =1.0.4, =1.0.6 - tkittagger 0.0.0.2 - wafl 0.0.1 - zero-shot-re 0.0.4 Source cves: CVE-2026-9856...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2026-9856 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2026-98...

blanc (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-9856 via transformers (2.4.0)

transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - blanc =0.1.0, =0.1.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

africanwhisper (>=0.2.3, <=0.9.0), batched-melbo (0.1.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.39.2)

transformers PYPI version 4.39.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - africanwhisper =0.2.3, =0.0.1a1, =0.1.1, =0.2.0, =0.0.2, =0.0.1, =0.2.1, =0.2.3, =0.2.3.post1 - rgpl 0.1.0 Source cves: CVE-2026-9856...

autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-9856 via transformers (4.41.0)

transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-9856...

cog-hf-template (>=0.0.3, <=0.0.5), dbgpt-hub (0.3.1) +9 more potentially affected by CVE-2026-9856 via transformers (4.33.2)

transformers PYPI version 4.33.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cog-hf-template =0.0.3, =0.1.4, =0.3.0, =2.0.14, =0.1.1, =0.1.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

bert-summarizer (0.0.6) potentially affected by CVE-2026-9856 via transformers (4.0.0rc1)

transformers PYPI version 4.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bert-summarizer 0.0.6 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

auto-ner (>=0.1.0, <=0.1.2), cog-hf-template (0.0.2) +10 more potentially affected by CVE-2026-9856 via transformers (4.32.1)

transformers PYPI version 4.32.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-ner =0.1.0, =0.1.0, =0.0.5, =3.4.4, =1.0.0, =1.20.0rc1, =0.0.3, =1.0.8, =0.0.1, =0.0.9 Source cves: CVE-2026-9856 Source advisory:...