biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-9856 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-9856...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-49119 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-49119 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-10783 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-5241 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-5241...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-48545 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-48545 Source advisory: OSV:PYSEC-2026-2178...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-4372 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-4372...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-4372 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-4372...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2026-1839 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2026-1839...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-28416 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-28415 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-28415 Source advisory: OSV:GHSA-PFJF-5GXR-995X...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-28414 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-28416 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-28416 Source advisory: OSV:PYSEC-2026-66...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-28415 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

dataflex (1.0.0), ksaa (>=2025.1.24, <=2025.3.9.4) +3 more potentially affected by CVE-2026-28414 via gradio (5.12.0)

gradio PYPI version 5.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - dataflex 1.0.0 - ksaa =2025.1.24, =0.0.5, =0.9.1, =0.9.5 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...

biomni-bridge (>=0.3.1, <=0.3.3), dataflex (1.0.0) +8 more potentially affected by CVE-2025-14929 via transformers (4.54.1)

transformers PYPI version 4.54.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - biomni-bridge =0.3.1, =0.0.1, =0.1.0, =0.2.0, =1.18.1, =0.1.0, =1.10.0, =1.10.1 - zensols-propbankdb 0.2.1 Source cves: CVE-2025-14929...

ambientagi (>=0.1.1, <=0.2.12), bsrag-langchain (0.3.8.3) +45 more potentially affected by CVE-2025-48889 via gradio (>=5.0.0b10, <=5.29.1)

gradio PYPI version =5.0.0b10, =0.1.1, =0.0.1, =1.0.1, =0.1.10, =0.0.1.dev0, =0.0.5, =0.0.2, =0.1.0, =0.1.1 and more Source cves: CVE-2025-48889 Source advisory: OSV:GHSA-8JW3-6X8J-V96G...

CVE-2011-1563

CVE-2011-1563 affects DATAC Control International RealWin SCADA Server (RealFlex RealWin) 2.1 and earlier. The vulnerability is a stack-based buffer overflow in the HMI RealWin server when processing multiple packet types (e.g., On_FC_CONNECT_FCS_LOGIN, FC_CTAGLIST_FCS_*TAG, and others) sent to p...