api-inference-community (>=0.0.12, <=0.0.22), bent (>=0.0.9, <=0.0.27) potentially affected by CVE-2026-66007 via datasets (1.10.0)

datasets PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - api-inference-community =0.0.12, =0.0.9, =0.0.27 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

api-inference-community (>=0.0.12, <=0.0.22), bent (>=0.0.9, <=0.0.27) potentially affected by CVE-2026-66007 via datasets (1.10.0)

datasets PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - api-inference-community =0.0.12, =0.0.9, =0.0.27 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

PYSEC-2026-2290

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the trustremotecode parameter, intended to prevent remote code execution, is...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.2

Red Hat OpenShift Service Mesh 3.2.2 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.2....