constellaration (>=0.2.0, <=0.3.0), llm-foundry (0.20.0) +1 more potentially affected by CVE-2026-66007 via datasets (3.5.1)

datasets PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - constellaration =0.2.0, =3.1.0, =3.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

aggressor (0.0.1a0), alignmap (1.0.0) +2 more potentially affected by CVE-2026-66007 via datasets (3.0.0)

datasets PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - aggressor 0.0.1a0 - alignmap 1.0.0 - e2tts-mlx =0.0.1a0, =0.0.4 - mimir-ai 0.0.3 Source cves: CVE-2026-66007 Source advisory:...

exsclaim (>=2.5.2b17, <=2.5.2), llmcompressor (>=0.12.0, <=0.12.0.1) +2 more potentially affected by CVE-2026-66007 via datasets (5.0.0)

datasets PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - exsclaim =2.5.2b17, =0.12.0, =0.6.0, =0.7.0.1 Source cves: CVE-2026-66007 Source advisory: GHSA-379C-QX7V-6H59...

a2 (>=0.3.2, <=0.10.13), adept-augmentations (0.1.0) +261 more potentially affected by CVE-2026-66007 via datasets (2.21.0)

datasets PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - a2 =0.3.2, =0.1.3, =0.1.0, =0.2.3, =3.0.0, =0.4.7, =0.0.13, =0.0.4, =0.0.1, =1.0.2, =1.0.0, =1.10.0 - aopc 0.1.0 and more Source cves:...

alexandra-ai (0.1.0), alexandra-ai-eval (0.1.0) +17 more potentially affected by CVE-2026-66007 via datasets (2.14.4)

datasets PYPI version 2.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - alexandra-ai 0.1.0 - alexandra-ai-eval 0.1.0 - briton =0.3.13.dev9, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =1.25.1, =0.0.1, =0.1.3, =0.0.1,...

autotrain-advanced (>=0.6.14, <=0.6.15.dev0), deepke (2.2.6) +4 more potentially affected by CVE-2026-66007 via datasets (2.13.2)

datasets PYPI version 2.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autotrain-advanced =0.6.14, =3.0.0, =0.3.3b2, =0.0.7, =0.0.9 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

alignment-handbook (0.1.0), arcee-align (>=0.0.1, <=0.0.6) +11 more potentially affected by CVE-2026-66007 via datasets (2.12.0)

datasets PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - alignment-handbook 0.1.0 - arcee-align =0.0.1, =1.0.0, =0.1.0, =0.0.7, =0.6.2, =0.1.3, =0.3.0, =0.1.0, =0.0.0.2, =0.2.0, =0.2.12 Source cves:...

azureml-evaluate-mlflow (>=0.0.4, <=0.0.15), datati (>=0.0.26, <=0.1.0) +5 more potentially affected by CVE-2026-66007 via datasets (2.11.0)

datasets PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-evaluate-mlflow =0.0.4, =0.0.26, =0.0.0a0, =0.1.0, =0.2.0 - py-data-modori 0.1.0 - waffle-hub 0.1.9 Source cves: CVE-2026-66007 Source...

df-graph-construction (0.1.0), medcat (>=1.5.3, <=1.6.1) +1 more potentially affected by CVE-2026-66007 via datasets (2.2.2)

datasets PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - df-graph-construction 0.1.0 - medcat =1.5.3, =0.0.20, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

esntorch (>=0.0.2, <=1.0.6), model-hub (>=0.16.0rc0, <=0.16.5) +1 more potentially affected by CVE-2026-66007 via datasets (1.7.0)

datasets PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - esntorch =0.0.2, =0.16.0rc0, =0.0.1, =0.0.3 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

ctc-score (>=0.1.0a1, <=0.1.0a3), formerbox (>=0.3.0b1, <=0.3.0b2) +4 more potentially affected by CVE-2026-66007 via datasets (1.5.0)

datasets PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - ctc-score =0.1.0a1, =0.3.0b1, =1.0.0.dev46, =0.15.4rc0, =0.0.4, =0.0.7 - sonorus 0.1.1 Source cves: CVE-2026-66007 Source advisory:...

finetune-eval-harness (>=0.5.0.dev0, <=0.6.12.dev1), modelscope (>=1.3.0, <=1.6.1) +3 more potentially affected by CVE-2026-66007 via datasets (2.8.0)

datasets PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - finetune-eval-harness =0.5.0.dev0, =1.3.0, =0.0.80, =0.0.0.15, =0.0.0.20 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

airunner (>=3.1.8, <=3.1.14), aitraining (>=0.0.0, <=0.8.37.dev0) +46 more potentially affected by CVE-2026-66007 via datasets (3.2.0)

datasets PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - airunner =3.1.8, =0.0.0, =0.7.3, =0.1.2, =0.8.34, =1.1.5, =0.1.1, =0.11.0, =0.1.24, =0.1.32 - genderbench 0.5.0 and more Source cves:...

atomgit (>=1.0.5, <=1.0.17), axolotl (0.13.0.dev0) +6 more potentially affected by CVE-2026-66007 via datasets (4.4.1)

datasets PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - atomgit =1.0.5, =0.1.0, =0.1.0, =0.0.11, =0.9.0, =0.9.0.4 - multimodal-parsers 0.1.6 - shifaa 0.1.0 Source cves: CVE-2026-66007 Source advisory:...

agentic-security (>=0.2.3, <=0.7.4), ai2-olmo-eval (>=0.8.6, <=0.9.0) +200 more potentially affected by CVE-2026-66007 via datasets (3.6.0)

datasets PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - agentic-security =0.2.3, =0.8.6, =1.1.0, =0.0.1, =3.1.20260611, =0.1.1, =0.1.4, =0.0.1, =1.0.6, =0.22.1, =0.20.0, =0.1.0, =0.1.0, =0.1.0, =0.1.7...

jiant (>=2.1.0, <=2.2.0) potentially affected by CVE-2026-66007 via datasets (1.1.2)

datasets PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - jiant =2.1.0, =2.2.0 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

constellaration (>=0.2.0, <=0.3.0), llm-foundry (0.20.0) +1 more potentially affected by CVE-2026-66007 via datasets (3.5.1)

datasets PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - constellaration =0.2.0, =3.1.0, =3.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

baseballcv (>=0.1.22, <=0.1.28) potentially affected by CVE-2026-66007 via datasets (3.4.0)

datasets PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - baseballcv =0.1.22, =0.1.28 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

axolotl (0.5.0), commit0 (>=0.1.7, <=0.1.8) +7 more potentially affected by CVE-2026-66007 via datasets (3.0.1)

datasets PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - axolotl 0.5.0 - commit0 =0.1.7, =0.6.0rc0, =0.2.1, =2.9.0, =2.9.0, =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-66007 Source advisory:...

clarinpl-embeddings (>=0.0.1rc158945962037, <=0.0.1rc158956732038) potentially affected by CVE-2026-66007 via datasets (1.16.1)

datasets PYPI version 1.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - clarinpl-embeddings =0.0.1rc158945962037, =0.0.1rc158956732038 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...