autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2026-57516 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2026-57516 Source advisory: OSV:GHSA-HHRP-GW25-JR43...

autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

ai-projects (>=0.0.6, <=0.0.9), autogluon (>=0.3.2b20220222, <=0.4.3) +72 more potentially affected by CVE-2024-6345 via setuptools (59.5.0)

setuptools PYPI version 59.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ai-projects =0.0.6, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =0.1.0, =0.2.1.dev20220303, =0.1.0, =0.1.0, =0.1.0, =22.0.0,...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2023-6020 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2023-6020 Source advisory: OSV:PYSEC-2026-516...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2023-6019 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2023-6019 Source advisory: OSV:PYSEC-2026-519...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2023-48022 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2023-48022 Source advisory: OSV:PYSEC-2026-517...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2025-34351 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2025-34351 Source advisory: OSV:PYSEC-2026-518...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-1839 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2026-32981 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2026-32981 Source advisory: OSV:GHSA-J3MH-QMJJ-XP83...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2026-32981 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2026-32981 Source advisory: OSV:PYSEC-2026-130...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2026-27482 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2026-27482 Source advisory: OSV:PYSEC-2026-2271...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2026-27482 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2026-27482 Source advisory: OSV:GHSA-Q5FH-2HC8-F6RQ...

autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2025-1979 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2025-1979 Source advisory: OSV:GHSA-W4RH-FGX7-Q63M...

autogluon (>=0.4.1b20220318, <=0.4.3), autotst (>=1.0.0, <=1.2.0) +7 more potentially affected by CVE-2023-6020 via ray (1.10.0)

ray PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - autogluon =0.4.1b20220318, =1.0.0, =0.0.1, =0.0.0, =0.1.0, =1.7.8, =0.1.5, =0.1.6 Source cves: CVE-2023-6020 Source advisory: OSV:GHSA-6CXR-8Q3M-JWRR...