bent (>=0.0.9, <=0.0.27), t5s (>=0.1.0, <=2.0.8) potentially affected by CVE-2026-9856 via transformers (4.9.0)

transformers PYPI version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - bent =0.0.9, =0.1.0, =2.0.8 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...