allennlp (>=1.0.0rc4.dev20200513, <=1.0.0rc6.dev20200601), allennlp-models (>=1.0.0rc4, <=1.0.0rc5) potentially affected by CVE-2026-9856 via transformers (2.9.1)

transformers PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc4.dev20200513, =1.0.0rc4, =1.0.0rc5 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allennlp (>=2.8.0, <=2.9.0.dev20211215), allennlp-models (2.8.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.12.5)

transformers PYPI version 4.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.8.0, =0.0.1rc158945962037, =0.1.2, =0.0.12, =0.0.0.116399031, =0.0.0.116461994 - transformers-embedder 1.8.2 Source cves:...

allennlp (>=1.0.0rc6.dev20200602, <=1.1.0rc1.dev20200706), allennlp-models (>=1.1.0rc1.dev20200630, <=1.1.0rc1.dev20200706) +6 more potentially affected by CVE-2026-9856 via transformers (2.10.0)

transformers PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200602, =1.1.0rc1.dev20200630, =0.0.6, =2.7.3, =0.2.15, =0.2.0, =0.3.0 Source cves: CVE-2026-9856 Source...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2026-9856 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allennlp (1.2.0rc1.dev20200923), awca (>=0.0.2, <=0.0.3.2) +9 more potentially affected by CVE-2026-9856 via transformers (3.1.0)

transformers PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 1.2.0rc1.dev20200923 - awca =0.0.2, =0.2.4, =0.4.8, =1.1.1, =1.1.0.dev202009251125, =2.1.0, =1.0.1, =1.1.0 Source cves:...

allennlp (1.3.0), allennlp-models (1.3.0) +3 more potentially affected by CVE-2026-9856 via transformers (4.0.1)

transformers PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 1.3.0 - allennlp-models 1.3.0 - indic-punct =2.0.7, =1.0.0.dev0, =0.6.1.dev0, =0.6.9 Source cves: CVE-2026-9856 Source advisory...

allennlp (>=1.0.0rc6.dev20200604, <=1.1.0rc1.dev20200709), allennlp-models (>=1.0.0rc6, <=1.1.0rc1.dev20200709) +29 more potentially affected by CVE-2026-9856 via transformers (2.11.0)

transformers PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200604, =1.0.0rc6, =0.0.1rc1, =0.1.2, =0.1.3, =0.5.2, =0.1.2, =3.0.1, =0.1.0, =1.8.0, =0.12.2.dev2, =0.12.2.dev...

allennlp (>=1.2.0rc1.dev20200924, <=1.2.0rc1.dev20200929) potentially affected by CVE-2026-9856 via transformers (3.2.0)

transformers PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.2.0rc1.dev20200924, =1.2.0rc1.dev20200929 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

allennlp (>=0.9.1.dev20200220, <=0.9.1.dev20200401), anilv-interpret-text (0.0.1) +9 more potentially affected by CVE-2026-9856 via transformers (2.4.1)

transformers PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200220, =0.5.8, =0.1.2, =0.0.12b0, =1.0.1, =1.0.0.dev202005031000, =0.1.1, =0.2.2, =0.3.0, =0.5.11 Source cves:...

allennlp (2.9.3), allennlp-models (>=2.9.0, <=2.9.3) +21 more potentially affected by CVE-2026-9856 via transformers (4.18.0)

transformers PYPI version 4.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 2.9.3 - allennlp-models =2.9.0, =0.3.1, =0.2.9, =1.1.1, =0.12.0, =2.0.0, =1.0.0b1, =0.1.0, =0.1.1, =0.1.0, =1.0.1 -...

allennlp (>=2.5.0.dev20210603, <=2.5.1.dev20210621), allennlp-models (2.5.0) +22 more potentially affected by CVE-2026-9856 via transformers (4.6.1)

transformers PYPI version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.0.dev20210603, =0.0.10, =3.1.0, =2.0.0, =0.0.1, =0.0.1, =2.0.0a0, =0.9.0, =0.0.29, =0.16.0rc0, =1.0.5, =0.0.8, =0.0.9 and...

adamix-gpt2 (>=0.0.1, <=0.0.2), allennlp (>=1.2.0rc1.dev20200930, <=1.2.0rc1.dev20201021) +6 more potentially affected by CVE-2026-9856 via transformers (3.3.1)

transformers PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adamix-gpt2 =0.0.1, =1.2.0rc1.dev20200930, =1.2.0rc1.dev20201007, =0.0.1, =0.5.0, =0.1.11, =0.1.12 - mc-transformers 0.1.11 Source cves:...

allennlp (>=2.2.0, <=2.2.1.dev20210406), allennlp-models (2.2.0) +14 more potentially affected by CVE-2026-9856 via transformers (4.4.2)

transformers PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.0, =1.0.0, =0.1.0, =0.1.0, =0.15.4rc0, =0.0.6, =0.0.1, =1.6.6, =1.7.1 and more Source cves: CVE-2026-9856 Source advisory:...

allennlp (2.9.0.dev20211217), clinitokenizer (>=0.0.3, <=0.0.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.14.1)

transformers PYPI version 4.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 2.9.0.dev20211217 - clinitokenizer =0.0.3, =0.0.3, =0.0.1, =0.0.3 Source cves: CVE-2026-9856 Source advisory:...

allennlp (>=2.2.1.dev20210408, <=2.7.0), allennlp-dataframe-mapper (0.2.1) +20 more potentially affected by CVE-2026-9856 via transformers (4.5.1)

transformers PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.1.dev20210408, =2.2.1.dev20210329, =0.0.0.2, =1.37.0, =0.0.1, =0.1.0, =0.3.0b1, =0.0.1, =1.0.23, =1.1.3 - nlp-nn 0.0.11.0...

allennlp (>=2.0.2.dev20210210, <=2.1.0), allennlp-models (>=2.0.0rc1, <=2.1.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.3.3)

transformers PYPI version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.0.2.dev20210210, =2.0.0rc1, =0.0.3, =0.1.0a1, =0.0.1, =0.1.1, =0.0.4, =0.7.0, =0.0.0, =1.0.0, =1.6.5 Source cves:...

allennlp (>=2.5.1.dev20210625, <=2.6.0), allennlp-models (>=2.5.0.dev20210603, <=2.6.0) +16 more potentially affected by CVE-2026-9856 via transformers (4.8.2)

transformers PYPI version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.1.dev20210625, =2.5.0.dev20210603, =0.0.1rc19, =0.1.5, =0.0.2, =0.0.4, =0.2.0, =0.12.3, =0.1.0, =0.1.1, =0.2.3, =0.2.0,...

allennlp (>=2.5.1.dev20210622, <=2.5.1.dev20210623), farm-haystack (1.0.0) +4 more potentially affected by CVE-2026-9856 via transformers (4.7.0)

transformers PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.5.1.dev20210622, =0.1.0, =0.3.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

airunner (>=3.1.8, <=3.1.14), aitraining (>=0.0.0, <=0.8.37.dev0) +153 more potentially affected by CVE-2026-34073 via cryptography (44.0.0)

cryptography PYPI version 44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - airunner =3.1.8, =0.0.0, =0.8.0, =0.2.4, =0.4.3.dev0, =0.1.3.dev3, =0.8.34, =1.0.0, =0.4.1, =0.121.3, =1.3.1, =1.5.0 - candig-server...