apple-silicon-booknlp (1.0.7.1), bcqa (>=1.0.0, <=1.1.4) +10 more potentially affected by CVE-2026-1839 via transformers (4.30.0)

transformers PYPI version 4.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - apple-silicon-booknlp 1.0.7.1 - bcqa =1.0.0, =1.0.0, =1.0.0, =0.1.1, =0.1.6, =0.1.0, =0.2.5, =0.1.2, =0.0.1, =0.0.3 Source cves:...

ares-ai (>=0.1.1, <=0.2.3), auto-round (0.0.0) +10 more potentially affected by CVE-2026-1839 via transformers (4.36.0)

transformers PYPI version 4.36.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ares-ai =0.1.1, =1.0.8, =0.3.0, =0.1.0, =0.1.0, =1.2.9, =1.3.4 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

3m (0.1.0), adapters (>=0.0.0.dev20230804, <=0.0.0.dev20230825) +61 more potentially affected by CVE-2026-1839 via transformers (4.31.0)

transformers PYPI version 4.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - 3m 0.1.0 - adapters =0.0.0.dev20230804, =0.8.0, =0.0.0, =0.8.3b20230817, =0.0.21.post1, =0.0.1, =0.1.1, =1.2.1, =0.1.4, =1.19.0rc1,...

airunner (>=4.1.2, <=4.11.3), auto-swagger (>=0.1.0, <=0.1.1) +37 more potentially affected by CVE-2026-1839 via transformers (4.55.4)

transformers PYPI version 4.55.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =4.1.2, =0.1.0, =0.4.6, =0.1.1, =0.2.7, =0.1.5, =0.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 and more Source cves:...

nemo-toolkit (1.2.0), ratsnlp (0.0.9993) +1 more potentially affected by CVE-2026-1839 via transformers (4.8.1)

transformers PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nemo-toolkit 1.2.0 - ratsnlp 0.0.9993 - summac =0.0.1, =0.0.3 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

algorin-cli (>=0.0.1, <=0.21.0), autotrain-advanced (>=0.7.2, <=0.7.7) +8 more potentially affected by CVE-2026-1839 via transformers (4.38.1)

transformers PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - algorin-cli =0.0.1, =0.7.2, =0.1.0, =0.0.92, =0.2.5, =2.0.0a12, =0.1.0, =0.1.4 Source cves: CVE-2026-1839 Source advisory:...

ares-ai (>=0.2.4, <=0.6.6), autotrain-advanced (>=0.7.64, <=0.7.101) +16 more potentially affected by CVE-2026-1839 via transformers (4.40.1)

transformers PYPI version 4.40.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ares-ai =0.2.4, =0.7.64, =0.1.5, =0.1.1, =0.3.0, =0.1.3, =0.1.0, =0.0.4, =0.1.0, =0.1.2, =2.6.5, =2.7.3 and more Source cves:...

adapters (1.1.1), aibrix (>=0.3.0rc1, <=0.5.0rc1) +57 more potentially affected by CVE-2026-1839 via transformers (4.48.3)

transformers PYPI version 4.48.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters 1.1.1 - aibrix =0.3.0rc1, =0.1.0.dev1, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.1.3, =0.0.1a0, =0.1.5, =1.0.0, =1.1.4 and more Sourc...

aiagents4pharma (>=1.6.0, <=1.44.0), aitraining (>=0.0.0, <=0.8.37.dev0) +29 more potentially affected by CVE-2026-1839 via transformers (4.48.0)

transformers PYPI version 4.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aiagents4pharma =1.6.0, =0.0.0, =0.8.35, =1.0.0, =0.3.5, =4.5.0, =0.1.1, =1.0.0, =0.4.1, =0.0.1a22, =0.1.1, =0.3.7 and more Source cves...

ares-ai (>=0.2.4, <=0.6.6), autotrain-advanced (>=0.7.64, <=0.7.101) +16 more potentially affected by CVE-2026-1839 via transformers (4.40.1)

transformers PYPI version 4.40.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ares-ai =0.2.4, =0.7.64, =0.1.5, =0.1.1, =0.3.0, =0.1.3, =0.1.0, =0.0.4, =0.1.0, =0.1.2, =2.6.5, =2.7.3 and more Source cves:...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-1839 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

bento2seldon (>=0.1.0, <=0.4.0), bento2seldon4recsys (>=0.1.0, <=0.1.3) potentially affected by CVE-2026-35043 via bentoml (0.12.1)

bentoml PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - bento2seldon =0.1.0, =0.1.0, =0.1.3 Source cves: CVE-2026-35043 Source advisory: OSV:PYSEC-2026-158...

org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2026-39365 via org.webjars.npm:vite (3.0.0-beta.9)

org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2026-39365 Source advisory:...

@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-39365 via vite-plus (0.1.11)

vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-39365 Source advisory: SNYK:JS-VITEPLUS-15922214...

@142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25), @agregio-solutions/design-system (>=1.89.2, <=1.89.4) +236 more potentially affected by CVE-2026-39365 via vite (>=7.0.0, <=7.3.1)

vite NPM version =7.0.0, =0.0.1-alpha.19, =1.89.2, =20.1.0-next.3, =20.1.0-next.3, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.0.0, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.37.0 and more Source cves: CVE-2026-39365 Source advisory: OSV:GHSA-4W7W-66W2-5VF9...

@ablehi/automation-app-build (>=0.1.0, <=0.3.6), @ablehi/automation-app-cli (>=0.1.0, <=0.3.5) +69 more potentially affected by CVE-2026-39365 via vite (>=8.0.0, <=8.0.3)

vite NPM version =8.0.0, =0.1.0, =0.1.0, =0.94.0, =3.0.1-alpha.0, =3.3.0, =11.17.0-depup.0, =35.0.0, =17.1.0, =4.0.0, =9.6.10, =0.0.0-experimental-1c4cca1-20260410-cca3318b, =0.0.0-experimental-196ba2e-20260326-ed190390, =0.1.0, =0.3.1 and more Source cves: CVE-2026-39365 Source advisory:...

@142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25), @agregio-solutions/design-system (>=1.89.2, <=1.89.4) +213 more potentially affected by CVE-2026-39365 via vite (>=7.0.1, <=7.3.1)

vite NPM version =7.0.1, =0.0.1-alpha.19, =1.89.2, =20.1.3, =20.1.3, =0.1.0, =0.0.4, =0.2.9, =0.79.1, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.37.0 and more Source cves: CVE-2026-39365 Source advisory: SNYK:JS-VITE-15922213...

@1771technologies/oneplay (>=0.0.1, <=0.0.6), @aicblock/cli (>=1.0.0, <=1.0.1) +219 more potentially affected by CVE-2026-39365 via vite (>=6.0.0-alpha.11, <=6.4.1)

vite NPM version =6.0.0-alpha.11, =0.0.1, =1.0.0, =1.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =4.4.4-beta.0 and more Source cves: CVE-2026-39365 Source advisory: GHSA-4W7W-66W2-5VF9...

@slidev-react/cli (>=0.4.6, <=0.4.14), @slidev-react/node (>=0.4.6, <=0.4.14) potentially affected by CVE-2026-39364 via vite-plus (0.1.11)

vite-plus NPM version 0.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on vite-plus and may be impacted: - @slidev-react/cli =0.4.6, =0.4.6, =0.4.14 Source cves: CVE-2026-39364 Source advisory: SNYK:JS-VITEPLUS-15922246...

@142vip/vuepress (>=0.0.1-alpha.19, <=0.0.1-alpha.25), @agregio-solutions/design-system (>=1.89.2, <=1.89.4) +196 more potentially affected by CVE-2026-39364 via vite (>=7.1.0, <=7.3.1)

vite NPM version =7.1.0, =0.0.1-alpha.19, =1.89.2, =20.2.0-next.3, =20.2.0-next.3, =0.1.0, =0.79.1, =1.0.0-beta.23, =2.1.2-alpha.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.23.0, =2.37.0 and more Source cves: CVE-2026-39364 Source advisory: SNYK:JS-VITE-15922245...