autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2026-57516 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

autocontrastive-gen (0.2.0), cnlp-transformers (>=0.4.0rc1, <=0.6.1) +8 more potentially affected by CVE-2026-66007 via datasets (2.4.0)

datasets PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autocontrastive-gen 0.2.0 - cnlp-transformers =0.4.0rc1, =1.0.1, =0.0.23, =0.0.1a0, =0.3.7, =0.0.10, =0.0.13 - zeldarose 0.6.0 Source cves:...

flagembedding (1.3.2), lavague (1.0.10) +2 more potentially affected by CVE-2026-66007 via datasets (2.19.0)

datasets PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - flagembedding 1.3.2 - lavague 1.0.10 - radeval =0.0.1rc6, =0.0.1, =0.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

deepfabric (>=2.3.1, <=2.4.0) potentially affected by CVE-2026-66007 via datasets (4.1.0)

datasets PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - deepfabric =2.3.1, =2.4.0 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

alignment-handbook (0.1.0), arcee-align (>=0.0.1, <=0.0.6) +11 more potentially affected by CVE-2026-66007 via datasets (2.12.0)

datasets PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - alignment-handbook 0.1.0 - arcee-align =0.0.1, =1.0.0, =0.1.0, =0.0.7, =0.6.2, =0.1.3, =0.3.0, =0.1.0, =0.0.0.2, =0.2.0, =0.2.12 Source cves:...

finetune-eval-harness (>=0.5.0.dev0, <=0.6.12.dev1), modelscope (>=1.3.0, <=1.6.1) +3 more potentially affected by CVE-2026-66007 via datasets (2.8.0)

datasets PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - finetune-eval-harness =0.5.0.dev0, =1.3.0, =0.0.80, =0.0.0.15, =0.0.0.20 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

africanwhisper (>=0.2.6, <=0.2.9), algorin-cli (>=0.0.1, <=0.21.0) +35 more potentially affected by CVE-2026-66007 via datasets (2.18.0)

datasets PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - africanwhisper =0.2.6, =0.0.1, =0.2.0, =0.1.4, =1.0.0, =0.1.1, =0.5.4, =0.1.0, =0.0.2, =1.35.2, =0.1.0, =0.1.4 and more Source cves:...

ctc-score (>=0.1.0a1, <=0.1.0a3), formerbox (>=0.3.0b1, <=0.3.0b2) +4 more potentially affected by CVE-2026-66007 via datasets (1.5.0)

datasets PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - ctc-score =0.1.0a1, =0.3.0b1, =1.0.0.dev46, =0.15.4rc0, =0.0.4, =0.0.7 - sonorus 0.1.1 Source cves: CVE-2026-66007 Source advisory:...

aiagents4pharma (>=1.45.0, <=1.48.1), aiagents4pharma-ansh (0.0.0) +74 more potentially affected by CVE-2026-66007 via datasets (4.0.0)

datasets PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - aiagents4pharma =1.45.0, =0.1.0, =0.0.5, =1.3.2b20250620, =1.3.2b20250620, =1.0.1, =0.0.46, =1.0.0, =0.2.1a0, =0.0.5, =0.0.7 - crypticbio 0.1.0...

africanwhisper (>=0.2.1, <=0.2.5), audioaugmentor (>=0.0.1, <=0.1.1) +8 more potentially affected by CVE-2026-66007 via datasets (2.17.1)

datasets PYPI version 2.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - africanwhisper =0.2.1, =0.0.1, =0.0.1, =0.1.3, =1.0.2, =1.1.0, =0.1.0, =0.1.4 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6...

agentic-security (>=0.2.3, <=0.7.4), ai2-olmo-eval (>=0.8.6, <=0.9.0) +198 more potentially affected by CVE-2026-66007 via datasets (3.6.0)

datasets PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - agentic-security =0.2.3, =0.8.6, =1.1.0, =0.0.1, =3.1.20260611, =0.1.1, =0.1.4, =0.0.1, =1.0.6, =0.22.1, =0.20.0, =0.1.0, =0.1.0, =0.1.0, =0.1.7...

esntorch (>=0.0.2, <=1.0.6), model-hub (>=0.16.0rc0, <=0.16.5) +1 more potentially affected by CVE-2026-66007 via datasets (1.7.0)

datasets PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - esntorch =0.0.2, =0.16.0rc0, =0.0.1, =0.0.3 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

aibench (>=0.0.2, <=0.0.5), artcraft (>=0.0.0, <=0.0.16) +11 more potentially affected by CVE-2026-66007 via datasets (2.13.0)

datasets PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - aibench =0.0.2, =0.0.0, =0.2.3, =0.2.0, =0.9.0, =0.3.11, =1.8.0rc0, =0.0.1rc0, =0.0.9, =0.0.13 Source cves: CVE-2026-66007 Source advisory:...

azureml-evaluate-mlflow (>=0.0.4, <=0.0.15), datati (>=0.0.26, <=0.1.0) +5 more potentially affected by CVE-2026-66007 via datasets (2.11.0)

datasets PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-evaluate-mlflow =0.0.4, =0.0.26, =0.0.0a0, =0.1.0, =0.2.0 - py-data-modori 0.1.0 - waffle-hub 0.1.9 Source cves: CVE-2026-66007 Source...

constellaration (>=0.2.0, <=0.3.0), llm-foundry (0.20.0) +1 more potentially affected by CVE-2026-66007 via datasets (3.5.1)

datasets PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - constellaration =0.2.0, =3.1.0, =3.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

medcat (>=1.0.0.dev32, <=1.0.0.dev45) potentially affected by CVE-2026-66007 via datasets (1.3.0)

datasets PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - medcat =1.0.0.dev32, =1.0.0.dev45 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

exsclaim (>=2.5.2b17, <=2.5.2), llmcompressor (>=0.12.0, <=0.12.0.1) +2 more potentially affected by CVE-2026-66007 via datasets (5.0.0)

datasets PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - exsclaim =2.5.2b17, =0.12.0, =0.6.0, =0.7.0.1 Source cves: CVE-2026-66007 Source advisory: GHSA-379C-QX7V-6H59...

atomgit (>=1.0.5, <=1.0.14), axolotl (0.13.0.dev0) +6 more potentially affected by CVE-2026-66007 via datasets (4.4.1)

datasets PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - atomgit =1.0.5, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.9.0.4 - multimodal-parsers 0.1.6 - shifaa 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

ainyan (>=1.0.0, <=1.0.79), alignment-handbook (0.2.0) +4 more potentially affected by CVE-2026-66007 via datasets (2.14.6)

datasets PYPI version 2.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - ainyan =1.0.0, =2.0.7, =1.0.0, =1.1.0 - nlpbaselines 0.0.26 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

aideml (>=0.1.0, <=0.2.2), dlk (>=0.0.13, <=0.0.19) +3 more potentially affected by CVE-2026-66007 via datasets (2.1.0)

datasets PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - aideml =0.1.0, =0.0.13, =1.0.1a2, =1.0.2.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...