autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

autogluon-multimodal (>=0.6.3b20230204, <=0.8.1), image-reward (1.3.0) +4 more potentially affected by CVE-2026-69112 via accelerate (0.16.0)

accelerate PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autogluon-multimodal =0.6.3b20230204, =0.1.0, =0.1.0, =0.4.0, =1.1.1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

autogluon-multimodal (>=0.5.3b20221112, <=0.6.3b20230120), wafl (>=0.0.8, <=0.0.71) potentially affected by CVE-2026-69112 via accelerate (0.13.2)

accelerate PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autogluon-multimodal =0.5.3b20221112, =0.0.8, =0.0.71 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

aesthetic-predictor-v2-5 (2024.5.28.1), animica (0.1.1) +36 more potentially affected by CVE-2026-69112 via accelerate (0.34.2)

accelerate PYPI version 0.34.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - aesthetic-predictor-v2-5 2024.5.28.1 - animica 0.1.1 - ares-ai =0.1.1, =1.1.2b20241107, =1.1.2b20241107, =1.3.0, =0.9.0, =0.1.0, =0.4.0rc2,...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-9856 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

auto-deep-learning (>=0.1.5.1, <=0.1.5.4), autogluon-multimodal (>=0.6.3b20230121, <=0.6.3b20230203) +50 more potentially affected by CVE-2026-9856 via transformers (4.25.1)

transformers PYPI version 4.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-deep-learning =0.1.5.1, =0.6.3b20230121, =0.0.1, =0.0.1, =2.3.0, =0.1.3, =0.0.1rc5, =0.0.7, =0.0.1, =1.12.0rc1, =0.12.0, =0.12.1 -...

airunner (>=3.0.0, <=3.1.7), autogluon-multimodal (>=1.1.2b20241102, <=1.1.2b20241106) +30 more potentially affected by CVE-2026-69112 via accelerate (0.33.0)

accelerate PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - airunner =3.0.0, =1.1.2b20241102, =1.1.2b20241102, =0.8.9, =2.6.0b1, =0.0.71, =4.2.0, =0.3.7rc0, =0.8.0, =1.3.0, =1.2.2, =0.0.10, =0.0.30 a...

apillava (0.1.0), artcraft (>=0.0.0, <=0.0.23) +28 more potentially affected by CVE-2026-69112 via accelerate (0.21.0)

accelerate PYPI version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - apillava 0.1.0 - artcraft =0.0.0, =0.8.3b20230817, =1.0.1b20240321, =0.0.2, =2.1.0b2, =0.1.52, =0.1.1, =1.1.0, =0.0.7, =3.0.1rc2, =3.1.1 -...

autogluon-multimodal (>=0.5.3b20221112, <=0.6.3b20230120), wafl (>=0.0.8, <=0.0.71) potentially affected by CVE-2026-69112 via accelerate (0.13.2)

accelerate PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autogluon-multimodal =0.5.3b20221112, =0.0.8, =0.0.71 Source cves: CVE-2026-69112 Source advisory: OSV:GHSA-4J2P-28Q2-5M79...

airunner (>=3.0.0, <=3.1.7), autogluon-multimodal (>=1.1.2b20241102, <=1.1.2b20241106) +30 more potentially affected by CVE-2026-69112 via accelerate (0.33.0)

accelerate PYPI version 0.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - airunner =3.0.0, =1.1.2b20241102, =1.1.2b20241102, =0.8.9, =2.6.0b1, =0.0.71, =4.2.0, =0.3.7rc0, =0.8.0, =1.3.0, =1.2.2, =0.0.10, =0.0.30 a...

autogluon-multimodal (>=0.6.3b20230204, <=0.8.1), image-reward (1.3.0) +4 more potentially affected by CVE-2026-69112 via accelerate (0.16.0)

accelerate PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autogluon-multimodal =0.6.3b20230204, =0.1.0, =0.1.0, =0.4.0, =1.1.1 Source cves: CVE-2026-69112 Source advisory: OSV:GHSA-4J2P-28Q2-5M79...

autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

ai-projects (>=0.0.6, <=0.0.9), autogluon (>=0.3.2b20220222, <=0.4.3) +72 more potentially affected by CVE-2024-6345 via setuptools (59.5.0)

setuptools PYPI version 59.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ai-projects =0.0.6, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =0.1.0, =0.2.1.dev20220303, =0.1.0, =0.1.0, =0.1.0, =22.0.0,...

aestetik (0.1.0), aihandler (>=1.9.0, <=1.19.0) +80 more potentially affected by CVE-2024-5980 via lightning (>=2.0.0rc0, <=2.3.2)

lightning PYPI version =2.0.0rc0, =1.9.0, =1.9.0, =1.8.0, =0.8.3b20230916, =0.8.3b20230916, =0.1.1, =0.0.1, =0.0.2, =0.8.6, =0.0.1, =0.0.0, =0.0.7, =0.1.0, =0.1.2 and more Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-386...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-5241 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-5241 Source advisory: OSV:GHSA-FGCW-684Q-JJ6R...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-5241 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-4372 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...

ammico-lavis (>=1.0.2.1, <=1.0.2.2), aniemore (1.2.3) +35 more potentially affected by CVE-2026-1839 via transformers (4.26.1)

transformers PYPI version 4.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis =1.0.2.1, =0.6.3b20230204, =0.0.2, =0.0.4, =0.6.1, =0.0.1, =0.1.1, =1.6.0.dev202305310417, =0.0.1, =2.0.0, =2.1.1 and more...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-1839 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-1839 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...