gantry (>=0.5.1, <=0.6.14), openicl (>=0.1.1, <=0.1.6) +2 more potentially affected by CVE-2026-66007 via datasets (2.7.1)

datasets PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - gantry =0.5.1, =0.1.1, =0.0.2, =0.0.4 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

finetune-eval-harness (>=0.5.0.dev0, <=0.6.12.dev1), modelscope (>=1.3.0, <=1.6.1) +3 more potentially affected by CVE-2026-66007 via datasets (2.8.0)

datasets PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - finetune-eval-harness =0.5.0.dev0, =1.3.0, =0.0.80, =0.0.0.15, =0.0.0.20 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

fashion-clip (>=0.1.1, <=0.1.2), parallel-corpus-mnbvc (>=1.0.0, <=1.0.8) potentially affected by CVE-2026-66007 via datasets (2.10.0)

datasets PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - fashion-clip =0.1.1, =1.0.0, =1.0.8 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

allennlp-datalawyer (>=0.3.16, <=0.3.17), allennlp-models (>=2.9.0, <=2.10.1) +35 more potentially affected by CVE-2026-66007 via datasets (2.10.1)

datasets PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - allennlp-datalawyer =0.3.16, =2.9.0, =0.0.1, =0.5.0, =0.1.2, =0.3.1, =0.2.5, =0.1.0, =0.1.14, =1.2.0, =0.1.0, =0.0.3, =0.3.1b4, =0.3.3b1 -...

azureml-evaluate-mlflow (>=0.0.4, <=0.0.15), datati (>=0.0.26, <=0.1.0) +5 more potentially affected by CVE-2026-66007 via datasets (2.11.0)

datasets PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-evaluate-mlflow =0.0.4, =0.0.26, =0.0.0a0, =0.1.0, =0.2.0 - py-data-modori 0.1.0 - waffle-hub 0.1.9 Source cves: CVE-2026-66007 Source...

alignment-handbook (0.1.0), arcee-align (>=0.0.1, <=0.0.6) +11 more potentially affected by CVE-2026-66007 via datasets (2.12.0)

datasets PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - alignment-handbook 0.1.0 - arcee-align =0.0.1, =1.0.0, =0.1.0, =0.0.7, =0.6.2, =0.1.3, =0.3.0, =0.1.0, =0.0.0.2, =0.2.0, =0.2.12 Source cves:...

aibench (>=0.0.2, <=0.0.5), artcraft (>=0.0.0, <=0.0.16) +11 more potentially affected by CVE-2026-66007 via datasets (2.13.0)

datasets PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - aibench =0.0.2, =0.0.0, =0.2.3, =0.2.0, =0.9.0, =0.3.11, =1.8.0rc0, =0.0.1rc0, =0.0.9, =0.0.13 Source cves: CVE-2026-66007 Source advisory:...

hyfi (>=1.10.1, <=1.11.0) potentially affected by CVE-2026-66007 via datasets (2.14.0)

datasets PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - hyfi =1.10.1, =1.11.0 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

hyfi (>=1.12.0, <=1.14.1) potentially affected by CVE-2026-66007 via datasets (2.14.1)

datasets PYPI version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - hyfi =1.12.0, =1.14.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

backdoormbti (>=0.1.1, <=0.2.2), hyfi (>=1.15.0, <=1.17.2) potentially affected by CVE-2026-66007 via datasets (2.14.2)

datasets PYPI version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - backdoormbti =0.1.1, =1.15.0, =1.17.2 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

hyfi (>=1.18.0, <=1.25.0) potentially affected by CVE-2026-66007 via datasets (2.14.3)

datasets PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - hyfi =1.18.0, =1.25.0 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

alexandra-ai (0.1.0), alexandra-ai-eval (0.1.0) +17 more potentially affected by CVE-2026-66007 via datasets (2.14.4)

datasets PYPI version 2.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - alexandra-ai 0.1.0 - alexandra-ai-eval 0.1.0 - briton =0.3.13.dev9, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =1.25.1, =0.0.1, =0.1.3, =0.0.1,...

ai-dive (0.0.1), ainyan (>=1.0.1, <=1.0.2) +10 more potentially affected by CVE-2026-66007 via datasets (2.14.5)

datasets PYPI version 2.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - ai-dive 0.0.1 - ainyan =1.0.1, =0.1.66, =0.1.2, =0.1.4, =0.18.0, =0.27.1 - recs-searcher 0.0.2 - renate 0.4.0 - xturing 0.1.8 Source cves:...

ainyan (>=1.0.0, <=1.0.79), alignment-handbook (0.2.0) +6 more potentially affected by CVE-2026-66007 via datasets (2.14.6)

datasets PYPI version 2.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - ainyan =1.0.0, =2.0.7, =0.1.9, =0.1.5, =1.0.0, =1.1.0 - nlpbaselines 0.0.26 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

autotrain-advanced (>=0.6.15, <=0.7.63), cfg-analysis-tool-py (0.1.0) +35 more potentially affected by CVE-2026-66007 via datasets (2.14.7)

datasets PYPI version 2.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autotrain-advanced =0.6.15, =0.1.3, =0.1.3, =0.1.1, =0.0.1rc7, =0.1.0, =2.1.4, =0.2.0, =2024.3.4, =0.0.66, =2.3.1, =0.1.0.dev0, =0.1.0.1 and mo...

bertlocrna (0.0.4), friday-agent (0.1.0) +12 more potentially affected by CVE-2026-66007 via datasets (2.15.0)

datasets PYPI version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - bertlocrna 0.0.4 - friday-agent 0.1.0 - gentab =0.1.0, =1.35.0, =0.1.12, =0.4.0, =0.8.1, =0.0.1, =0.1.3, =0.5.0, =0.1.2, =0.0.0, =0.0.2, =0.0.1...

azureml-automl-dnn-nlp (1.55.0), azureml-evaluate-mlflow (>=0.0.16, <=0.0.25) +28 more potentially affected by CVE-2026-66007 via datasets (2.16.1)

datasets PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-automl-dnn-nlp 1.55.0 - azureml-evaluate-mlflow =0.0.16, =1.0.5, =0.0.5, =1.2.6, =1.0.0, =1.0.0, =0.9.0.13, =0.9.0, =1.0.0.dev0, =0.0.1...

africanwhisper (>=0.3.0, <=0.9.0), databricks-genai (>=0.0.10, <=2.0.0a9) +1 more potentially affected by CVE-2026-66007 via datasets (2.17.0)

datasets PYPI version 2.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - africanwhisper =0.3.0, =0.0.10, =0.40.0, =0.44.0 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

a2 (>=0.3.2, <=0.10.13), abliterix (>=1.1.0, <=1.12.2) +1206 more potentially affected by CVE-2026-66007 via datasets (>=1.1.2, <=5.0.0)

datasets PYPI version =1.1.2, =0.3.2, =1.1.0, =0.2.1, =0.1.0, =0.2.14, =0.1.3, =0.2.1, =2.0.4, =0.0.4, =0.1.0, =0.0.7, =0.3.6 and more Source cves: CVE-2026-66007 Source advisory: MEND:CVE-2026-66007...

mcpuniverse (>=1.0.0, <=1.1.3), mseep-mcpuniverse (1.0.4) potentially affected by CVE-2026-66004 via blender-mcp (1.1.3)

blender-mcp PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on blender-mcp and may be impacted: - mcpuniverse =1.0.0, =1.1.3 - mseep-mcpuniverse 1.0.4 Source cves: CVE-2026-66004 Source advisory: MEND:CVE-2026-66004...