airunner (>=4.1.2, <=4.11.3), auto-swagger (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2026-9856 via transformers (4.55.4)

transformers PYPI version 4.55.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =4.1.2, =0.1.0, =0.4.6, =0.1.1, =0.2.7, =0.1.5, =0.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 and more Source cves:...

unsloth (>=2025.11.2, <=2025.11.6), unsloth-zoo (>=2025.11.3, <=2025.12.1) potentially affected by CVE-2026-9856 via transformers (4.57.2)

transformers PYPI version 4.57.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - unsloth =2025.11.2, =2025.11.3, =2025.12.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

aitraining (>=0.0.7, <=0.0.49), bookvox (>=0.5.0, <=0.5.2) +49 more potentially affected by CVE-2026-9856 via transformers (4.57.3)

transformers PYPI version 4.57.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aitraining =0.0.7, =0.5.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.4.0, =0.3.2, =0.4.0 and more Source cves: CVE-2026-9856...

ads-and (0.1.3), ads-bib (>=0.1.0, <=0.3.3) +39 more potentially affected by CVE-2026-9856 via transformers (4.56.2)

transformers PYPI version 4.56.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ads-and 0.1.3 - ads-bib =0.1.0, =0.8.0, =0.1.0, =2.0.0rc2, =0.1.0, =0.15.5, =0.1.1, =0.13.2, =1.0.3.post1.dev0, =1.0.0, =1.0.5 and more...

agentcraft-mcp (0.1.0), apteryx-transformers (>=0.1.1, <=0.1.5) +44 more potentially affected by CVE-2026-9856 via transformers (4.53.2)

transformers PYPI version 4.53.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agentcraft-mcp 0.1.0 - apteryx-transformers =0.1.1, =0.1.2, =0.0.2, =0.0.8, =0.0.2, =1.0.1, =1.1.6, =0.1.0, =0.0.5, =0.1.2, =0.4.2,...

autotrain-advanced (>=0.8.7, <=0.8.8), bloombee (>=0.1.1, <=0.1.3) +7 more potentially affected by CVE-2026-9856 via transformers (4.43.1)

transformers PYPI version 4.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.7, =0.1.1, =1.0.0, =1.1.28.14, =0.1.0, =0.3.8, =1.1.0, =1.2.2 - turbo-alignment 0.0.4 Source cves: CVE-2026-985...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-9856 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

aisak (>=2.2.2, <=2.3.1), astaligner (1.0.2) +13 more potentially affected by CVE-2026-9856 via transformers (4.45.1)

transformers PYPI version 4.45.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aisak =2.2.2, =0.0.1, =1.0.0, =0.1.42.dev0, =0.1.4, =0.0.1a8, =1.0.0a43, =0.2.0, =0.0.8, =0.1.1, =0.3.8, =0.1.0, =0.1.4 Source cves:...

axolotl (0.5.0), buzz-captions (1.2.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.46.1)

transformers PYPI version 4.46.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - axolotl 0.5.0 - buzz-captions 1.2.0 - fastvideo =0.0.1.dev0, =2.0.21, =0.1.1, =0.4.6, =0.1.0, =0.0.3.post1, =0.0.4 - xcodec2-infer-lib...

adapters (1.1.0), advtok (0.0.2) +45 more potentially affected by CVE-2026-9856 via transformers (4.47.1)

transformers PYPI version 4.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.0 - advtok 0.0.2 - akasha-terminal =0.9.0, =0.1.0, =1.3.0, =0.3.7, =2.1.7, =0.0.1, =1.0.0, =0.1.2, =0.1.55, =0.1.62 and mo...

amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.1)

transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...

chemical-converters (0.1.2), dora-phi4 (>=0.0.0, <=0.3.13) +14 more potentially affected by CVE-2026-9856 via transformers (4.48.2)

transformers PYPI version 4.48.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - chemical-converters 0.1.2 - dora-phi4 =0.0.0, =0.1.10, =0.1.2, =0.13.3, =0.1.0, =0.0.7, =1.2.3, =0.5.8, =0.1.0, =0.8.2, =0.1.2, =1.1.5,...

agent-memory-jojo (0.1.3), airunner (>=3.2.0, <=4.1.1) +46 more potentially affected by CVE-2026-9856 via transformers (4.50.3)

transformers PYPI version 4.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agent-memory-jojo 0.1.3 - airunner =3.2.0, =0.1.0, =0.4.3, =0.0.3, =0.2.2, =0.1.0, =0.20.0, =1.0.9, =0.6.4, =2.8.0rc1, =2.8.2 and more...

blanc (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-9856 via transformers (2.4.0)

transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - blanc =0.1.0, =0.1.5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

adaptor (>=0.1.0, <=0.1.3), obsei (0.0.10) potentially affected by CVE-2026-9856 via transformers (4.10.2)

transformers PYPI version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptor =0.1.0, =0.1.3 - obsei 0.0.10 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

ktrain (0.31.2), mt-telescope (0.0.2) +7 more potentially affected by CVE-2026-9856 via transformers (4.10.3)

transformers PYPI version 4.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktrain 0.31.2 - mt-telescope 0.0.2 - paoding 0.1.1 - reading4listeners =0.0.2b0, =0.0.1rc1, =0.0.1rc0, =1.1.0.dev0, =1.0.0rc6, =1.0.1...

adaptnlp (>=0.3.0, <=0.3.7), chatting-chatbots (0.0.1) +16 more potentially affected by CVE-2026-9856 via transformers (4.12.2)

transformers PYPI version 4.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptnlp =0.3.0, =0.2.2, =0.0.1, =0.1.0rc0, =0.0.1, =0.0.4, =2.0.0, =1.0.0, =1.6.1, =1.6.11 - textattack 0.3.5 and more Source cves:...

aihandler (>=1.8.20, <=1.9.1), aimet-torch (1.31.1) +16 more potentially affected by CVE-2026-9856 via transformers (4.27.4)

transformers PYPI version 4.27.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.8.20, =3.0.0, =0.2.0, =0.9.0, =1.0.4, =0.0.1, =0.0.1.post3, =0.0.1, =0.0.34, =0.0.39 and more Source cves: CVE-2026-9856...

aihandler (>=1.9.2, <=1.10.2), airunner (>=1.9.1, <=1.10.3) +37 more potentially affected by CVE-2026-9856 via transformers (4.28.1)

transformers PYPI version 4.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aihandler =1.9.2, =1.9.1, =1.0.1, =1.0.0, =0.2.3, =0.1.0, =0.0.7, =0.0.88, =1.4.5, =0.0.9, =0.2.4, =0.0.1, =0.1.2, =0.2.2 and more Sour...

allennlp (>=2.9.0.dev20211224, <=2.9.0), bcipy (>=2.0.0rc1, <=2.0.1rc2) +13 more potentially affected by CVE-2026-9856 via transformers (4.15.0)

transformers PYPI version 4.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.9.0.dev20211224, =2.0.0rc1, =0.0.6, =1.0.6, =0.1.0, =1.2.0, =0.0.1, =0.0.2 - wandb-allennlp 0.3.1 Source cves: CVE-2026-985...