chemical-converters (0.1.2), dora-phi4 (>=0.0.0, <=0.3.13) +14 more potentially affected by CVE-2026-9856 via transformers (4.48.2)

transformers PYPI version 4.48.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chemical-converters 0.1.2 - dora-phi4 =0.0.0, =0.1.10, =0.1.2, =0.13.3, =0.1.0, =0.0.7, =1.2.3, =0.5.8, =0.1.0, =0.8.2, =0.1.2, =1.1.5,...

adapters (1.1.1), aibrix (>=0.3.0rc1, <=0.5.0rc1) +55 more potentially affected by CVE-2026-9856 via transformers (4.48.3)

transformers PYPI version 4.48.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.1 - aibrix =0.3.0rc1, =0.1.0.dev1, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.1.3, =0.0.1a0, =0.1.5, =1.0.0, =1.1.4 -...

archit (>=2026.3.1, <=2026.4.1), argilla-plugins (>=0.1.2, <=0.1.3) +70 more potentially affected by CVE-2026-9856 via transformers (4.49.0)

transformers PYPI version 4.49.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - archit =2026.3.1, =0.1.2, =1.3.2b20250620, =1.2.1b20250404, =1.2.1b20250404, =0.1.2, =1.1.6, =0.1.0, =2.7.6, =0.39.0, =0.1.3, =0.1.40 a...

frony-document-processor (0.3.0), vllm-plugin-meralion2 (>=0.1.2.post2.dev1, <=0.1.2.post2) +1 more potentially affected by CVE-2026-9856 via transformers (4.50.1)

transformers PYPI version 4.50.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - frony-document-processor 0.3.0 - vllm-plugin-meralion2 =0.1.2.post2.dev1, =1.0.0rc1, =1.0.0rc2 Source cves: CVE-2026-9856 Source...

agent-memory-jojo (0.1.3), airunner (>=3.2.0, <=4.1.1) +45 more potentially affected by CVE-2026-9856 via transformers (4.50.3)

transformers PYPI version 4.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agent-memory-jojo 0.1.3 - airunner =3.2.0, =0.1.0, =0.4.3, =0.0.3, =0.2.2, =0.1.0, =0.20.0, =1.0.9, =0.6.4, =2.8.0rc1, =2.8.2 and more...

any4any (0.1.1), bertnado (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-9856 via transformers (4.51.0)

transformers PYPI version 4.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - any4any 0.1.1 - bertnado =0.1.0, =0.0.0, =0.4.11, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aait (>=1.0.0.0, <=2.3.14), adapters (1.2.0) +88 more potentially affected by CVE-2026-9856 via transformers (4.51.3)

transformers PYPI version 4.51.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aait =1.0.0.0, =0.3.16, =0.1.0, =0.6.1, =0.1.0, =0.1.1, =0.1.122 - colpali-engine 0.3.10 - coqui-tts 0.26.2 - dadmatools 2.3.0 and more...

amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.1)

transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...

avalan (>=1.0.5, <=1.1.5), deepmost (0.5.2) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.3)

transformers PYPI version 4.52.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.0.5, =0.1.2, =0.0.0, =0.8.2, =1.3.0, =0.2.0, =0.1.8, =0.2.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX...

appcategorizer (>=0.1.0, <=0.2.2), bicleaner-ai (>=3.3.1, <=3.4.0) +38 more potentially affected by CVE-2026-9856 via transformers (4.52.4)

transformers PYPI version 4.52.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - appcategorizer =0.1.0, =3.3.1, =0.1.1, =0.5.7, =0.2.13, =3.0.0, =3.0.0rc1, =0.4.0, =0.1.1, =1.1.0, =0.0.3, =0.0.6 and more Source cves:...

avalan (1.1.6), karma-medeval (>=0.1.0, <=0.2.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.53.0)

transformers PYPI version 4.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan 1.1.6 - karma-medeval =0.1.0, =0.3.1, =0.0.1.2, =0.2.0, =0.9.0, =0.2.0, =0.2.2, =0.0.3, =0.0.4 - unimeth 0.0.2 -...

avalan (>=1.2.0, <=1.2.13), mcp-instana (0.1.1) +4 more potentially affected by CVE-2026-9856 via transformers (4.53.1)

transformers PYPI version 4.53.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.2.0, =0.8.6, =0.9.2a0, =0.9.1a0, =0.9.2 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

agentcraft-mcp (0.1.0), apteryx-transformers (>=0.1.1, <=0.1.5) +38 more potentially affected by CVE-2026-9856 via transformers (4.53.2)

transformers PYPI version 4.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agentcraft-mcp 0.1.0 - apteryx-transformers =0.1.1, =0.0.2, =0.0.8, =0.0.2, =1.0.1, =0.0.5, =0.1.2, =0.4.2, =0.4.1, =0.1.2, =1.1.7,...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-9856...

aiu-fms-testing-utils (>=0.2.1, <=0.2.2), avalan (>=1.2.16, <=1.3.10) +2 more potentially affected by CVE-2026-9856 via transformers (4.55.0)

transformers PYPI version 4.55.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiu-fms-testing-utils =0.2.1, =1.2.16, =1.3.10 - live-translation 0.9.0 - vail-model-registry 0.1.12 Source cves: CVE-2026-9856 Source...

airunner (>=4.1.2, <=4.11.3), auto-swagger (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2026-9856 via transformers (4.55.4)

transformers PYPI version 4.55.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =4.1.2, =0.1.0, =0.4.6, =0.1.1, =0.2.7, =0.1.5, =0.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 and more Source cves:...

bacpipe (>=1.1.0, <=1.3.0), certora-patrol (>=0.1.3, <=0.1.17) +9 more potentially affected by CVE-2026-9856 via transformers (4.56.0)

transformers PYPI version 4.56.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bacpipe =1.1.0, =0.1.3, =0.1.18, =0.2.1a0, =0.3.2, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-9856 Source advisory:...

ads-and (0.1.3), ads-bib (>=0.1.0, <=0.3.3) +39 more potentially affected by CVE-2026-9856 via transformers (4.56.2)

transformers PYPI version 4.56.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ads-and 0.1.3 - ads-bib =0.1.0, =0.8.0, =0.1.0, =2.0.0rc2, =0.1.0, =0.15.5, =0.1.1, =0.13.2, =1.0.3.post1.dev0, =1.0.0, =1.0.5 and more...

unsloth (>=2025.11.2, <=2025.11.6), unsloth-zoo (>=2025.11.3, <=2025.12.1) potentially affected by CVE-2026-9856 via transformers (4.57.2)

transformers PYPI version 4.57.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - unsloth =2025.11.2, =2025.11.3, =2025.12.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aitraining (>=0.0.7, <=0.0.49), bookvox (>=0.5.0, <=0.5.2) +49 more potentially affected by CVE-2026-9856 via transformers (4.57.3)

transformers PYPI version 4.57.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitraining =0.0.7, =0.5.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.4.0, =0.3.2, =0.4.0 and more Source cves: CVE-2026-9856...