cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-8763 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-8763 Source advisory:...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19692 more potentially affected by CVE-2026-15055 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.4.0, =0.4.0, =0.4.0, =0.8.1, =0.31.0, =0.5.0, =0.6.0, =0.5.0, =0.6.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-15055 Source advisory: MEND:CVE-2026-15055...

@forgeax/game (>=0.3.0, <=0.3.10), @huiliyi37/cordis-plugin-loader (>=0.2.0, <=0.8.0) +11 more potentially affected by unknown CVE via pnpm (>=11.5.3, <=11.7.0)

pnpm NPM version =11.5.3, =0.3.0, =0.2.0, =0.1.0-beta.3, =0.1.0-rc.20, =0.2.0-alpha.7, =0.1.2, =0.1.13, =2.2.0, =2.2.12 Source cves: unknown CVE Source advisory: MEND:WS-2026-0047...

algorin-cli (>=0.0.1, <=0.21.0), autotrain-advanced (>=0.7.2, <=0.7.7) +8 more potentially affected by CVE-2026-9856 via transformers (4.38.1)

transformers PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - algorin-cli =0.0.1, =0.7.2, =0.1.0, =0.0.92, =0.2.5, =2.0.0a12, =0.1.0, =0.1.4 Source cves: CVE-2026-9856 Source advisory:...

adapters (0.1.2), azureml-automl-dnn-nlp (1.55.0) +65 more potentially affected by CVE-2026-9856 via transformers (4.36.2)

transformers PYPI version 4.36.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 0.1.2 - azureml-automl-dnn-nlp 1.55.0 - bcembedding =0.1.4, =0.1.0, =0.2.2, =0.0.1, =1.0.0, =0.3.4, =0.0.1rc7, =1.0.18, =0.0.1...

autotrain-advanced (>=0.8.21, <=0.8.25), cehrbert (1.5.0) +1 more potentially affected by CVE-2026-9856 via transformers (4.45.0)

transformers PYPI version 4.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.21, =0.0.13, =0.1.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

dataflow-421 (>=0.1.8, <=0.2.12), easyroutine (>=1.1.1, <=1.1.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.51.1)

transformers PYPI version 4.51.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dataflow-421 =0.1.8, =1.1.1, =1.0.10, =1.18.0, =1.27.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-9856...

agent-memory-jojo (0.1.3), airunner (>=3.2.0, <=4.1.1) +45 more potentially affected by CVE-2026-9856 via transformers (4.50.3)

transformers PYPI version 4.50.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - agent-memory-jojo 0.1.3 - airunner =3.2.0, =0.1.0, =0.4.3, =0.0.3, =0.2.2, =0.1.0, =0.20.0, =1.0.9, =0.6.4, =2.8.0rc1, =2.8.2 and more...

agentkb (>=0.1.0, <=0.3.0), ai-voice-interconnector (>=0.10.6, <=0.10.7) +229 more potentially affected by CVE-2026-9856 via transformers (>=5.0.0rc0, <=5.9.0)

transformers PYPI version =5.0.0rc0, =0.1.0, =0.10.6, =1.1.8, =0.1.0, =1.1.0, =2026.5.22, =0.7.0, =2.0.0, =3.1.0, =3.9.11, =0.2.2, =0.2.5 and more Source cves: CVE-2026-9856 Source advisory: GHSA-XRQW-3RRV-VX5W...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-9856 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

cltl-dialogue-evaluation (>=0.1.0.dev1, <=0.2.7.dev1), kwja (>=1.0.0, <=1.2.2) +6 more potentially affected by CVE-2026-9856 via transformers (4.19.4)

transformers PYPI version 4.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cltl-dialogue-evaluation =0.1.0.dev1, =1.0.0, =1.5.3, =0.0.20, =1.3.0, =1.10.1 - zensols-spanmatch 0.0.1 Source cves: CVE-2026-9856...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allencv (>=0.1.2, <=0.1.3), allennlp (>=1.4.0, <=2.0.2.dev20210209) +25 more potentially affected by CVE-2026-9856 via transformers (4.2.2)

transformers PYPI version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allencv =0.1.2, =1.4.0, =0.0.3, =1.4.0, =0.0.3, =1.0.0, =0.0.1, =0.0.4, =0.3.4, =0.1.0, =0.2.0 - model-hub 0.1.0.dev0 and more Source...

codegaze (0.0.23a0), deep-copilot (>=0.0.5, <=0.0.8) +13 more potentially affected by CVE-2026-9856 via transformers (4.21.3)

transformers PYPI version 4.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - codegaze 0.0.23a0 - deep-copilot =0.0.5, =0.3.2, =0.0.1, =0.0.1a0, =0.0.1, =0.2.1, =0.20.0 - spacy-transformers 1.1.8 -...

aidriver (0.1.0), lama-cleaner (>=0.18.0, <=0.23.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.20.0)

transformers PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aidriver 0.1.0 - lama-cleaner =0.18.0, =1.0.0, =2022.6.23, =2022.6.29.post2 Source cves: CVE-2026-9856 Source advisory:...

baram (>=0.3.2, <=0.3.7), basejump (>=0.1.7, <=0.3.1) +14 more potentially affected by CVE-2026-65321 via pyathena (>=3.0.5, <=3.34.0)

pyathena PYPI version =3.0.5, =0.3.2, =0.1.7, =0.31.6, =1.1.135, =3.0.0, =6.0.5, =0.1.2, =9.0.0, =0.2.0, =1.0.0, =0.1.0, =1.11.0, =1.11.0, =0.1.1, =0.2.8 and more Source cves: CVE-2026-65321 Source advisory: SNYK:PYTHON-PYATHENA-19270043...

aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +178 more potentially affected by CVE-2026-9335 via keras (2.8.0rc1)

keras PYPI version 2.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =0.1.11, =0.1.11, =0.6.3, =0.0.6, =0.0.1, =1.1.2, =1.1.17 and more Source cves: CVE-2026-9335 Source...

adpred (1.3.2), africanwhisper (>=0.2.3, <=0.9.0) +83 more potentially affected by CVE-2026-9335 via keras (>=3.0.0, <=3.12.1)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =0.2.3 and more Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

adpred (1.3.2), africanwhisper (>=0.2.3, <=0.9.0) +83 more potentially affected by CVE-2026-9335 via keras (>=3.0.0, <=3.12.1)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.3.0.dev4, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =0.2.3 and more Source cves: CVE-2026-9335 Source advisory: GHSA-M8WH-29WM-52MV...