Online AutoML: Evaluating Poisoning Attacks on Adversarial Training Defense Strategy in IoT Networks

Machine learning ML-powered poisoning attack vectors are adversarial maneuvers whereby an attacker intentionally inserts, corrupts, or alters training data to distort an ML model's learning process. The objective is to diminish model efficacy, instill biases, induce misclassifications, or include...

allennlp (>=2.2.1.dev20210408, <=2.7.0), allennlp-dataframe-mapper (0.2.1) +20 more potentially affected by CVE-2026-9856 via transformers (4.5.1)

transformers PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.1.dev20210408, =2.2.1.dev20210329, =0.0.0.2, =1.37.0, =0.0.1, =0.1.0, =0.3.0b1, =0.0.1, =1.0.23, =1.1.3 - nlp-nn 0.0.11.0...

azureml-automl-dnn-nlp (>=1.45.0, <=1.47.0), fastestimator (>=1.2.0, <=1.4.3) +3 more potentially affected by CVE-2026-9856 via transformers (4.6.0)

transformers PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.45.0, =1.2.0, =1.2.0.dev202105200119, =0.1.0, =0.1.7, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

azureml-automl-dnn-nlp (>=1.48.0, <=1.53.0) potentially affected by CVE-2026-9856 via transformers (4.16.0)

transformers PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.48.0, =1.53.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

azureml-automl-dnn-nlp (>=1.53.1, <=1.54.0), cinosum (>=1.0.4, <=1.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.33.1)

transformers PYPI version 4.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.53.1, =1.0.4, =1.0.1, =1.1.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2026-12481 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

allennlp (>=2.2.1.dev20210408, <=2.7.0), allennlp-dataframe-mapper (0.2.1) +20 more potentially affected by CVE-2026-9856 via transformers (4.5.1)

transformers PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =2.2.1.dev20210408, =2.2.1.dev20210329, =0.0.0.2, =1.37.0, =0.0.1, =0.1.0, =0.3.0b1, =0.0.1, =1.0.23, =1.1.3 - nlp-nn 0.0.11.0...

azureml-automl-dnn-nlp (>=1.45.0, <=1.47.0), fastestimator (>=1.2.0, <=1.4.3) +3 more potentially affected by CVE-2026-9856 via transformers (4.6.0)

transformers PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.45.0, =1.2.0, =1.2.0.dev202105200119, =0.1.0, =0.1.7, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

azureml-automl-dnn-nlp (>=1.48.0, <=1.53.0) potentially affected by CVE-2026-9856 via transformers (4.16.0)

transformers PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.48.0, =1.53.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

azureml-automl-dnn-nlp (>=1.53.1, <=1.54.0), cinosum (>=1.0.4, <=1.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.33.1)

transformers PYPI version 4.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-automl-dnn-nlp =1.53.1, =1.0.4, =1.0.1, =1.1.0 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

adaptnlp (>=0.3.0, <=0.3.5), autonlp (>=0.2.8, <=0.3.2) +3 more potentially affected by CVE-2026-66007 via datasets (1.8.0)

datasets PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - adaptnlp =0.3.0, =0.2.8, =1.37.0, =3.1.0, =0.1.1, =0.1.7 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

azureml-automl-dnn-nlp (1.55.0), azureml-evaluate-mlflow (>=0.0.16, <=0.0.25) +28 more potentially affected by CVE-2026-66007 via datasets (2.16.1)

datasets PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - azureml-automl-dnn-nlp 1.55.0 - azureml-evaluate-mlflow =0.0.16, =1.0.5, =0.0.5, =1.2.6, =1.0.0, =1.0.0, =0.9.0.13, =0.9.0, =1.0.0.dev0, =0.0.1...

autonlp (>=0.3.5, <=0.3.7), autotrain-advanced (0.4.0) +12 more potentially affected by CVE-2026-66007 via datasets (1.11.0)

datasets PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autonlp =0.3.5, =1.45.0, =0.0.1, =0.2.2, =0.0.2, =0.1.7, =2.0.0, =1.4.0, =0.1.3, =0.2.12, =0.2.14 Source cves: CVE-2026-66007 Source advisory:...

adaptnlp (>=0.3.0, <=0.3.5), autonlp (>=0.2.8, <=0.3.2) +3 more potentially affected by CVE-2026-66007 via datasets (1.8.0)

datasets PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - adaptnlp =0.3.0, =0.2.8, =1.37.0, =3.1.0, =0.1.1, =0.1.7 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

autonlp (>=0.3.5, <=0.3.7), autotrain-advanced (0.4.0) +12 more potentially affected by CVE-2026-66007 via datasets (1.11.0)

datasets PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - autonlp =0.3.5, =1.45.0, =0.0.1, =0.2.2, =0.0.2, =0.1.7, =2.0.0, =1.4.0, =0.1.3, =0.2.12, =0.2.14 Source cves: CVE-2026-66007 Source advisory:...

amber-automl (>=0.1.0, <=0.1.2), axelerate (>=0.5.2, <=0.5.6) +32 more potentially affected by CVE-2026-1462 via keras (2.2.5)

keras PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - amber-automl =0.1.0, =0.5.2, =0.2.6, =0.0.1, =0.1.13, =0.2.0, =0.0.3, =0.16.3, =0.9.6, =1.2.0, =0.0.1, =0.0.10 - monk-cpu 0.0.1 and more Source cves:...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-33976 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-33976 Source advisory: OSV:PYSEC-2026-3190...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-33976 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-33976...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-25661 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-25661 Source advisory: OSV:PYSEC-2026-3182...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25659 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25659...