bent (>=0.0.9, <=0.0.27), t5s (>=0.1.0, <=2.0.8) potentially affected by CVE-2026-9856 via transformers (4.9.0)

transformers PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bent =0.0.9, =0.1.0, =2.0.8 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

a62-emotion (>=0.10.11, <=0.11.4), aac-metrics (>=0.5.5, <=0.6.0) +1884 more potentially affected by CVE-2026-9856 via transformers (4.57.6)

transformers PYPI version 4.57.6 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - a62-emotion =0.10.11, =0.5.5, =0.2.1, =0.1.0, =1.3.8, =20260210.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-9856 Source...

dynamic-prompting (>=0.2.4, <=0.2.6), embedprepro (>=0.1.0, <=0.12.0) +6 more potentially affected by CVE-2026-9856 via transformers (4.41.1)

transformers PYPI version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dynamic-prompting =0.2.4, =0.1.0, =4.2.4, =0.1.0, =0.0.23, =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...

adapters (1.1.0), advtok (0.0.2) +44 more potentially affected by CVE-2026-9856 via transformers (4.47.1)

transformers PYPI version 4.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.0 - advtok 0.0.2 - akasha-terminal =0.9.0, =0.1.0, =1.3.0, =0.3.7, =2.1.7, =0.0.1, =1.0.0, =0.1.2, =0.1.55, =0.1.62 and mo...

serverless-llm-store (0.5.0), turbo-alignment (0.0.2) potentially affected by CVE-2026-9856 via transformers (4.42.0)

transformers PYPI version 4.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - serverless-llm-store 0.5.0 - turbo-alignment 0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

africanwhisper (>=0.2.3, <=0.9.0), batched-melbo (0.1.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.39.2)

transformers PYPI version 4.39.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - africanwhisper =0.2.3, =0.0.1a1, =0.1.1, =0.2.0, =0.0.2, =0.0.1, =0.2.1, =0.2.3, =0.2.3.post1 - rgpl 0.1.0 Source cves: CVE-2026-9856...

bacpipe (>=1.1.0, <=1.3.0), certora-patrol (>=0.1.3, <=0.1.17) +9 more potentially affected by CVE-2026-9856 via transformers (4.56.0)

transformers PYPI version 4.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bacpipe =1.1.0, =0.1.3, =0.1.18, =0.2.1a0, =0.3.2, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory:...

aiforthechurch (0.1.0), attention-sinks (>=0.2.2, <=0.4.0) +12 more potentially affected by CVE-2026-9856 via transformers (4.34.0)

transformers PYPI version 4.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiforthechurch 0.1.0 - attention-sinks =0.2.2, =0.1.66, =2.2.0, =0.0.13, =0.1.0, =0.1.0, =0.2.0rc8, =1.0.0, =0.1.0, =0.2.0 - urag 0.0.1...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-9856 via transformers (4.21.0)

transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

genienlp (0.3.0), soco-mrc (>=0.0.6, <=0.0.8.1) +1 more potentially affected by CVE-2026-9856 via transformers (2.9.0)

transformers PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - genienlp 0.3.0 - soco-mrc =0.0.6, =1.0.37, =1.0.88 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-9856 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

nemo-toolkit (1.2.0), ratsnlp (0.0.9993) +1 more potentially affected by CVE-2026-9856 via transformers (4.8.1)

transformers PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nemo-toolkit 1.2.0 - ratsnlp 0.0.9993 - summac =0.0.1, =0.0.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.1)

transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...

fast-tts (0.0.3), few-shot-priming (>=0.0.14, <=0.0.226) potentially affected by CVE-2026-9856 via transformers (4.19.0)

transformers PYPI version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - fast-tts 0.0.3 - few-shot-priming =0.0.14, =0.0.226 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2026-9856 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2026-98...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

mengzi-zero-shot (>=0.1.0, <=0.2.1), nalcos (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-9856 via transformers (4.10.1)

transformers PYPI version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - mengzi-zero-shot =0.1.0, =0.1.1, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2026-9856 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allennlp (>=2.9.0.dev20211224, <=2.9.0), bcipy (>=2.0.0rc1, <=2.0.1rc2) +13 more potentially affected by CVE-2026-9856 via transformers (4.15.0)

transformers PYPI version 4.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.9.0.dev20211224, =2.0.0rc1, =0.0.6, =1.0.6, =0.1.0, =1.2.0, =0.0.1, =0.0.2 - wandb-allennlp 0.3.1 Source cves: CVE-2026-985...

arctic-training (>=0.0.1, <=0.0.2), bcipy (2.0.1) +13 more potentially affected by CVE-2026-9856 via transformers (4.47.0)

transformers PYPI version 4.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - arctic-training =0.0.1, =0.0.32, =0.3.8.0, =0.1.0, =0.1.3, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source...