autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2026-41486 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

autogluon (>=0.3.2b20211214, <=0.3.2b20220125), msapy (>=0.0.1, <=1.0.0) potentially affected by CVE-2026-41486 via ray (1.7.1)

ray PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20211214, =0.0.1, =1.0.0 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2272...

ammico-lavis (>=1.0.2.1, <=1.0.2.2), aniemore (1.2.3) +35 more potentially affected by CVE-2026-1839 via transformers (4.26.1)

transformers PYPI version 4.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ammico-lavis =1.0.2.1, =0.6.3b20230204, =0.0.2, =0.0.4, =0.6.1, =0.0.1, =0.1.1, =1.6.0.dev202305310417, =0.0.1, =2.0.0, =2.1.1 and more...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-1839 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-1839 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

auto-obsidian (>=0.1.0, <=0.1.3), autogluon (0.5.3) +10 more potentially affected by CVE-2026-1839 via transformers (4.23.1)

transformers PYPI version 4.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-obsidian =0.1.0, =0.5.3b20221025, =0.1.0, =0.0.8, =0.0.14 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

autogluon (>=0.3.2b20220126, <=0.4.1b20220317), gen2-connector (>=1.0.0b48, <=1.0.0b56) +2 more potentially affected by CVE-2026-27482 via ray (1.8.0)

ray PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20220126, =1.0.0b48, =0.0.7.post1, =0.1.0b0, =0.1.3 Source cves: CVE-2026-27482 Source advisory: OSV:PYSEC-2026-2271...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2026-27482 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2026-27482 Source advisory: OSV:GHSA-Q5FH-2HC8-F6RQ...

autogluon (>=0.3.2b20211214, <=0.3.2b20220125), msapy (>=0.0.1, <=1.0.0) potentially affected by CVE-2026-27482 via ray (1.7.1)

ray PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20211214, =0.0.1, =1.0.0 Source cves: CVE-2026-27482 Source advisory: OSV:GHSA-Q5FH-2HC8-F6RQ...

autogluon (>=0.3.2b20211214, <=0.3.2b20220125), msapy (>=0.0.1, <=1.0.0) potentially affected by CVE-2025-62593 via ray (1.7.1)

ray PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20211214, =0.0.1, =1.0.0 Source cves: CVE-2025-62593 Source advisory: OSV:GHSA-Q279-JHRF-CC6V...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2025-62593 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2025-62593 Source advisory: OSV:GHSA-Q279-JHRF-CC6V...

adaswarm (>=0.0.1, <=0.0.2), allennlp (>=2.8.0, <=2.9.1) +81 more potentially affected by CVE-2025-3000 via torch (1.10.2)

torch PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - adaswarm =0.0.1, =2.8.0, =2.8.0, =0.1.0, =0.2.1b20210731, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.40.0, =0.1.0, =0.1.2, =0.2.8 -...

aima (2023.2.4), aine-drl (0.1.1) +174 more potentially affected by CVE-2025-2953 via torch (1.11.0)

torch PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - aima 2023.2.4 - aine-drl 0.1.1 - allennlp =2.9.2, =2.9.3, =0.1.0, =0.1.2, =1.0.0, =0.1.1, =0.4.3b20220621, =0.4.3b20220621, =0.4.3b20220621,...

autogluon (0.0.5), bliz (>=0.1.0, <=0.1.3) +25 more potentially affected by CVE-2024-5206 via scikit-learn (0.21.2)

scikit-learn PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - autogluon 0.0.5 - bliz =0.1.0, =0.0.70, =0.1.18, =1.0.0, =0.8.0, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.3, =0.0.14 and mo...

autogluon (0.0.5), bliz (>=0.1.0, <=0.1.3) +25 more potentially affected by CVE-2024-5206 via scikit-learn (0.21.2)

scikit-learn PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - autogluon 0.0.5 - bliz =0.1.0, =0.0.70, =0.1.18, =1.0.0, =0.8.0, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.3, =0.0.14 and mo...

al-for-design (0.0.1), autogluon (>=0.0.5, <=0.1.0b20210209) +48 more potentially affected by CVE-2023-50447 via pillow (6.2.1)

pillow PYPI version 6.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - al-for-design 0.0.1 - autogluon =0.0.5, =0.0.15b20201014, =0.0.15b20201024, =0.0.16b20210114, =0.0.15b20201024, =0.0.121, =0.0.1, =0.0.1, =0.0.1,...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2023-48022 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2023-48022 Source advisory: OSV:GHSA-6WGJ-66M2-XXP2...

abmarl (>=0.2.3, <=0.2.4), autogluon (>=0.4.3b20220611, <=0.4.3b20220617) +4 more potentially affected by CVE-2023-6021 via ray (1.12.1)

ray PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - abmarl =0.2.3, =0.4.3b20220611, =3.1.1, =2022.7.7.dev1, =1.2.0, =1.2.1 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

ablator (>=0.0.1b1, <=0.0.1b3), ablator-ken-test (0.0.1b2) +63 more potentially affected by CVE-2023-6021 via ray (>=2.0.0, <=2.8.0)

ray PYPI version =2.0.0, =0.0.1b1, =0.0.1, =0.2.2, =0.10.0, =0.3.6, =0.5.3b20221011, =0.1.1b20230324, =0.5.3b20221011, =0.5.3b20221011, =0.5.3b20221116, =0.0.3, =0.0.4 and more Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...

autogluon (>=0.3.2b20211214, <=0.3.2b20220125), msapy (>=0.0.1, <=1.0.0) potentially affected by CVE-2023-6021 via ray (1.7.1)

ray PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.3.2b20211214, =0.0.1, =1.0.0 Source cves: CVE-2023-6021 Source advisory: OSV:GHSA-3PWW-QVR8-6MHP...