ROOT-APP-PYPI-CVE-2026-28498 CVE-2026-28498 in Authlib - Patched by Root

Root has patched CVE-2026-28498 in the Authlib package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-JJ8C-MMJ3-MMGV GHSA-jj8c-mmj3-mmgv in Authlib - Patched by Root

Root has patched GHSA-jj8c-mmj3-mmgv in the Authlib package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-4GG8-GXPX-9RPH GHSA-4gg8-gxpx-9rph in uv - Patched by Root

Root has patched GHSA-4gg8-gxpx-9rph in the uv package for Root:PyPI. Multiple fixed versions available...

annotald (>=1.3.1, <=1.3.7) potentially affected by CVE-2026-12259 +1 more via nltk (2.0.4)

nltk PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on nltk and may be impacted: - annotald =1.3.1, =1.3.7 Source cves: CVE-2026-12259, CVE-2026-63310 Source advisory: OSV:PYSEC-2026-4318...

aa-rag (>=0.4.2, <=0.4.3), aaa-ml-datasets-course (1.0.0) +924 more potentially affected by CVE-2026-12259 via nltk (>=3.0.0, <=3.9.4)

nltk PYPI version =3.0.0, =0.4.2, =0.2.3, =0.0.1, =0.2.0, =0.0.4, =0.4.0, =0.0.1, =0.1.0, =1.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2026-12259 Source advisory: SNYK:PYTHON-NLTK-19639601...

ROOT-APP-PYPI-CVE-2026-48782 CVE-2026-48782 in pydantic-ai-slim - Patched by Root

Root has patched CVE-2026-48782 in the pydantic-ai-slim package for Root:PyPI. Multiple fixed versions available...

augly-jp (>=2021.9.6, <=2021.9.26), biome-text (3.3.0) +10 more potentially affected by CVE-2026-9856 via transformers (4.9.2)

transformers PYPI version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - augly-jp =2021.9.6, =1.2.1, =0.1.0, =1.0.4, =1.0.6 - tkittagger 0.0.0.2 - wafl 0.0.1 - zero-shot-re 0.0.4 Source cves: CVE-2026-9856...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2026-9856 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

blanc (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-9856 via transformers (2.4.0)

transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - blanc =0.1.0, =0.1.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2026-9856 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2026-98...

genienlp (0.3.0), soco-mrc (>=0.0.6, <=0.0.8.1) +1 more potentially affected by CVE-2026-9856 via transformers (2.9.0)

transformers PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - genienlp 0.3.0 - soco-mrc =0.0.6, =1.0.37, =1.0.88 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

bert-summarizer (0.0.6) potentially affected by CVE-2026-9856 via transformers (4.0.0rc1)

transformers PYPI version 4.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bert-summarizer 0.0.6 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allencv (>=0.1.2, <=0.1.3), allennlp (>=1.4.0, <=2.0.2.dev20210209) +25 more potentially affected by CVE-2026-9856 via transformers (4.2.2)

transformers PYPI version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allencv =0.1.2, =1.4.0, =0.0.3, =1.4.0, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.3.4, =0.1.0, =0.2.0 - model-hub 0.1.0.dev0 and more Source...

slp (>=1.2.0, <=1.2.1) potentially affected by CVE-2026-9856 via transformers (4.3.0)

transformers PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - slp =1.2.0, =1.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

nemo-toolkit (1.2.0), ratsnlp (0.0.9993) +1 more potentially affected by CVE-2026-9856 via transformers (4.8.1)

transformers PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nemo-toolkit 1.2.0 - ratsnlp 0.0.9993 - summac =0.0.1, =0.0.3 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

bent (>=0.0.9, <=0.0.27), t5s (>=0.1.0, <=2.0.8) potentially affected by CVE-2026-9856 via transformers (4.9.0)

transformers PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bent =0.0.9, =0.1.0, =2.0.8 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

dadmatools (>=1.1.1.dev2, <=1.5.1), databalancer (>=0.0.7, <=0.0.8) +1 more potentially affected by CVE-2026-9856 via transformers (4.9.1)

transformers PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dadmatools =1.1.1.dev2, =0.0.7, =0.3.0, =0.3.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...