avalan (>=1.0.5, <=1.1.5), deepmost (0.5.2) +11 more potentially affected by CVE-2026-5241 via transformers (4.52.3)

transformers PYPI version 4.52.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.0.5, =0.1.2, =0.0.0, =0.8.2, =1.3.0, =0.2.0, =0.1.8, =0.2.0 Source cves: CVE-2026-5241 Source advisory: OSV:GHSA-FGCW-684Q-JJ...

agentengine (>=0.1.5, <=0.1.8), deepmost (0.5.2) +14 more potentially affected by CVE-2025-9959 via smolagents (>=0.1.3, <=1.19.0)

smolagents PYPI version =0.1.3, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =0.0.1.dev0, =0.0.1, =1.0.1 - smolmodels 0.15.0 and more Source cves: CVE-2025-9959 Source advisory: MEND:CVE-2025-9959...