mengzi-zero-shot (>=0.1.0, <=0.2.1), nalcos (>=0.1.1, <=0.2.0) potentially affected by CVE-2026-9856 via transformers (4.10.1)

transformers PYPI version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - mengzi-zero-shot =0.1.0, =0.1.1, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

adaptor (>=0.1.0, <=0.1.3), obsei (0.0.10) potentially affected by CVE-2026-9856 via transformers (4.10.2)

transformers PYPI version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptor =0.1.0, =0.1.3 - obsei 0.0.10 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

ktrain (0.31.2), mt-telescope (0.0.2) +7 more potentially affected by CVE-2026-9856 via transformers (4.10.3)

transformers PYPI version 4.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktrain 0.31.2 - mt-telescope 0.0.2 - paoding 0.1.1 - reading4listeners =0.0.2b0, =0.0.1rc1, =0.0.1rc0, =1.1.0.dev0, =1.0.0rc6, =1.0.1...

exciton (>=1.4.0, <=1.4.3), leafnlp (0.0.17) +1 more potentially affected by CVE-2026-9856 via transformers (4.11.2)

transformers PYPI version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - exciton =1.4.0, =0.0.3, =0.0.4 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

booknlp2 (>=1.0.0, <=1.0.1), classy-core (>=0.1.0.dev20211019, <=0.2.1) +10 more potentially affected by CVE-2026-9856 via transformers (4.11.3)

transformers PYPI version 4.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - booknlp2 =1.0.0, =0.1.0.dev20211019, =0.1.0, =1.2.0, =0.3.0, =1.1.0.dev4, =1.1.0, =1.2.0 - zensols-mednlp 0.0.1 Source cves:...

adaptnlp (>=0.3.0, <=0.3.7), chatting-chatbots (0.0.1) +16 more potentially affected by CVE-2026-9856 via transformers (4.12.2)

transformers PYPI version 4.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptnlp =0.3.0, =0.2.2, =0.0.1, =0.1.0rc0, =0.0.1, =0.0.4, =2.0.0, =1.0.0, =1.6.1, =1.6.11 - textattack 0.3.5 and more Source cves:...

artificial-detection (0.1.0), benchformer (0.0.1.dev1) +1 more potentially affected by CVE-2026-9856 via transformers (4.12.3)

transformers PYPI version 4.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - artificial-detection 0.1.0 - benchformer 0.0.1.dev1 - tai-chi-engine =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...

allennlp (>=2.9.0.dev20211224, <=2.9.0), bcipy (>=2.0.0rc1, <=2.0.1rc2) +13 more potentially affected by CVE-2026-9856 via transformers (4.15.0)

transformers PYPI version 4.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.9.0.dev20211224, =2.0.0rc1, =0.0.6, =1.0.6, =0.1.0, =1.2.0, =0.0.1, =0.0.2 - wandb-allennlp 0.3.1 Source cves: CVE-2026-985...

azureml-automl-dnn-nlp (>=1.48.0, <=1.53.0) potentially affected by CVE-2026-9856 via transformers (4.16.0)

transformers PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.48.0, =1.53.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-9856 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

allennlp (2.9.2), classy-core (>=0.3.0.dev20220423, <=0.3.2) +15 more potentially affected by CVE-2026-9856 via transformers (4.17.0)

transformers PYPI version 4.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 2.9.2 - classy-core =0.3.0.dev20220423, =0.0.1, =0.0.11, =1.1.9, =0.1.0, =1.1.18, =0.7.0, =1.0.1a2, =1.0.2.1 and more Source...

fast-tts (0.0.3), few-shot-priming (>=0.0.14, <=0.0.226) potentially affected by CVE-2026-9856 via transformers (4.19.0)

transformers PYPI version 4.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - fast-tts 0.0.3 - few-shot-priming =0.0.14, =0.0.226 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-9856 Source advisory:...

aitoolbox (>=1.0.0, <=1.1.0), allencv (>=0.1.0, <=0.1.1) +59 more potentially affected by CVE-2026-9856 via transformers (4.20.1)

transformers PYPI version 4.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitoolbox =1.0.0, =0.1.0, =2.10.0, =0.1.0, =0.0.3, =2.10.0, =0.1.0, =0.0.3, =0.0.1, =0.0.1, =0.0.2, =0.4.3b20220621, =0.4.3b20220621,...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), lama-cleaner (>=0.24.0, <=0.29.1) +1 more potentially affected by CVE-2026-9856 via transformers (4.21.0)

transformers PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - khoj-assistant =0.1.0, =0.24.0, =0.29.1 - med-clip-weixiong 0.0.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

codegaze (0.0.23a0), deep-copilot (>=0.0.5, <=0.0.8) +13 more potentially affected by CVE-2026-9856 via transformers (4.21.3)

transformers PYPI version 4.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - codegaze 0.0.23a0 - deep-copilot =0.0.5, =0.3.2, =0.0.1, =0.0.1a0, =0.0.1, =0.2.1, =0.20.0 - spacy-transformers 1.1.8 -...

cpkil (0.0.1), detoxify (0.5.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.22.1)

transformers PYPI version 4.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cpkil 0.0.1 - detoxify 0.5.1 - fmeval =0.2.0, =0.0.1, =0.1.0, =0.0.2, =0.0.7 Source cves: CVE-2026-9856 Source advisory:...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-9856 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

arelight (0.24.0), bicleaner-ai (2.0.0rc2) +25 more potentially affected by CVE-2026-9856 via transformers (4.24.0)

transformers PYPI version 4.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - arelight 0.24.0 - bicleaner-ai 2.0.0rc2 - bnaug =1.0.0.dev0, =2.0.4, =0.0.0, =0.8.7a0, =1.0.0, =0.0.3, =0.0.1, =1.1.25, =1.2.28 and mor...

auto-deep-learning (>=0.1.5.1, <=0.1.5.4), autogluon-multimodal (>=0.6.3b20230121, <=0.6.3b20230203) +50 more potentially affected by CVE-2026-9856 via transformers (4.25.1)

transformers PYPI version 4.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-deep-learning =0.1.5.1, =0.6.3b20230121, =0.0.1, =0.0.1, =2.3.0, =0.1.3, =0.0.1rc5, =0.0.7, =0.0.1, =1.12.0rc1, =0.12.0, =0.12.1 -...