adaseq (0.4.0), crfm-helm (>=0.1.0, <=0.4.0) +2 more potentially affected by CVE-2026-66007 via datasets (2.5.2)

datasets PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - adaseq 0.4.0 - crfm-helm =0.1.0, =1.0.4, =0.1.0, =0.2.7 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

cnlp-transformers (>=0.3.1rc1, <=0.6.0), crfm-helm (>=0.1.0, <=0.2.1) +12 more potentially affected by CVE-2026-4372 via transformers (4.22.2)

transformers PYPI version 4.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cnlp-transformers =0.3.1rc1, =0.1.0, =0.0.1, =2.0.16, =0.3.8, =0.0.1, =0.4.3, =3.0.5, =0.0.8, =0.0.9 Source cves: CVE-2026-4372 Source...

cnlp-transformers (>=0.3.1rc1, <=0.6.0), crfm-helm (>=0.1.0, <=0.2.1) +12 more potentially affected by CVE-2025-14929 via transformers (4.22.2)

transformers PYPI version 4.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cnlp-transformers =0.3.1rc1, =0.1.0, =0.0.1, =2.0.16, =0.3.8, =0.0.1, =0.4.3, =3.0.5, =0.0.8, =0.0.9 Source cves: CVE-2025-14929 Source...

arcor2-execution-rest-proxy (>=0.8.1, <=0.16.0), crfm-helm (>=0.1.0, <=0.5.4) +8 more potentially affected by CVE-2024-35515 via sqlitedict (1.7.0)

sqlitedict PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlitedict and may be impacted: - arcor2-execution-rest-proxy =0.8.1, =0.1.0, =0.0.1, =0.1.1, =0.1.3, =0.5.9, =0.1.0, =0.0.1.3, =0.0.1.320220108150357 Source cves:...