byudml (>=0.7.4, <=0.7.7) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.0)

sentence-transformers PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - byudml =0.7.4, =0.7.7 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

byudml (>=0.7.2, <=0.7.3), mmt-retrieval (0.1.2) +1 more potentially affected by CVE-2026-68770 via sentence-transformers (1.2.1)

sentence-transformers PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - byudml =0.7.2, =0.0.4, =0.0.12 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...