bento-cli (>=0.1.0, <=0.1.1), walletlib (0.1.0) potentially affected by CVE-2026-76218 via gitpython (2.1.14)

gitpython PYPI version 2.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - bento-cli =0.1.0, =0.1.1 - walletlib 0.1.0 Source cves: CVE-2026-76218 Source advisory: OSV:PYSEC-2026-3840...

cde (>=0.1.0, <=0.2.0.1), deeppavlov (>=0.0.5.1, <=0.0.5.3) potentially affected by CVE-2026-12570 via keras (2.1.2)

keras PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cde =0.1.0, =0.0.5.1, =0.0.5.3 Source cves: CVE-2026-12570 Source advisory: OSV:PYSEC-2026-3856...

a62-emotion (>=0.10.11, <=0.11.4), adcl (>=0.1.2, <=0.1.4) +160 more potentially affected by CVE-2026-12570 via keras (2.11.0)

keras PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - a62-emotion =0.10.11, =0.1.2, =1.3.0, =1.2.36, =1.0.3, =0.3.1, =0.0.3, =0.2.4, =2.0.0, =0.1.10, =0.0.0, =0.3.1 - brainglobe-workflows 1.0.0 and more...

ax-env (>=0.2.6, <=0.2.7), cbc (>=1.0.0, <=1.1.0) +18 more potentially affected by CVE-2026-12570 via keras (2.9.0)

keras PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - ax-env =0.2.6, =1.0.0, =0.3.0, =0.1.8, =1.0.0, =1.0.12, =0.6.1, =1.0.0, =0.1.7, =1.0.8rc18, =1.0.8rc19 and more Source cves: CVE-2026-12570 Source...

adamix-gpt2 (>=0.0.1, <=0.0.2), allennlp (>=1.2.0rc1.dev20200930, <=1.2.0rc1.dev20201021) +6 more potentially affected by CVE-2026-9856 via transformers (3.3.1)

transformers PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adamix-gpt2 =0.0.1, =1.2.0rc1.dev20200930, =1.2.0rc1.dev20201007, =0.0.1, =0.5.0, =0.1.11, =0.1.12 - mc-transformers 0.1.11 Source cves:...

azureml-metrics (0.0.25.post1), deepvisiontools (>=0.1.0, <=0.2.0) +10 more potentially affected by CVE-2026-9856 via transformers (4.50.0)

transformers PYPI version 4.50.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - azureml-metrics 0.0.25.post1 - deepvisiontools =0.1.0, =0.7.0, =1.1.0, =1.4.0, =0.6.3, =0.1.0, =0.10.4, =0.11.0 Source cves:...

open-rag-eval (>=0.2.4, <=0.3.0) potentially affected by CVE-2026-9856 via transformers (4.50.2)

transformers PYPI version 4.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - open-rag-eval =0.2.4, =0.3.0 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

airunner (>=3.1.8, <=3.1.14), ano-code (>=1.1.39, <=8.0.34) +19 more potentially affected by CVE-2026-9856 via transformers (4.48.1)

transformers PYPI version 4.48.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - airunner =3.1.8, =1.1.39, =3.1.6, =0.0.1, =1.0.0, =0.1.0, =2.6.0rc1, =0.1.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.2.0, =2025.3.2 -...

autotrain-advanced (>=0.8.9, <=0.8.11), dgenerate (>=4.2.0, <=4.2.3) +11 more potentially affected by CVE-2026-9856 via transformers (4.44.0)

transformers PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.9, =4.2.0, =0.1.1, =1.0.0, =0.1.0, =0.1.4, =0.3.8, =0.4.0, =0.1.1, =1.0.0, =0.1.0, =0.1.1, =0.1.7 Source cves:...

adapters (>=0.0.0.dev20231111, <=0.0.0.dev20231116), ag-llama-api-s (0.0.12) +44 more potentially affected by CVE-2026-9856 via transformers (4.33.3)

transformers PYPI version 4.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231111, =0.0.13, =0.0.15, =0.0.29, =0.1.0, =0.3.0, =0.0.1, =0.1.36a0, =1.1.1, =0.1.1, =0.1.5 and more Source cves:...

smaberta (>=0.0.1, <=0.0.2), trl (0.0.2) potentially affected by CVE-2026-9856 via transformers (2.6.0)

transformers PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - smaberta =0.0.1, =0.0.2 - trl 0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

allennlp (>=0.9.1.dev20200220, <=0.9.1.dev20200401), anilv-interpret-text (0.0.1) +9 more potentially affected by CVE-2026-9856 via transformers (2.4.1)

transformers PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200220, =0.5.8, =0.1.2, =0.0.12b0, =1.0.1, =1.0.0.dev202005031000, =0.1.1, =0.2.2, =0.3.0, =0.5.11 Source cves:...

3m (0.1.0), adapters (>=0.0.0.dev20230804, <=0.0.0.dev20230825) +61 more potentially affected by CVE-2026-9856 via transformers (4.31.0)

transformers PYPI version 4.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - 3m 0.1.0 - adapters =0.0.0.dev20230804, =0.8.0, =0.0.0, =0.8.3b20230817, =0.0.21.post1, =0.0.1, =0.1.1, =1.2.1, =0.1.4, =1.19.0rc1,...

accord-nlp (>=0.1.0, <=0.1.8), allennlp (2.9.1) +17 more potentially affected by CVE-2026-9856 via transformers (4.16.2)

transformers PYPI version 4.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - accord-nlp =0.1.0, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =1.5.0, =1.5.0.dev202203021257, =0.2.1, =0.11.0, =0.13.0 ...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-9856 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2026-9856 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2026-9856 Source advisory:...

sealights-python-agent (>=0.2.213, <=0.2.247) potentially affected by CVE-2026-76217 via gitpython (2.1.13)

gitpython PYPI version 2.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - sealights-python-agent =0.2.213, =0.2.247 Source cves: CVE-2026-76217 Source advisory: OSV:PYSEC-2026-3841...

example-pkg-naturalett (>=14.4.0, <=14.4.6) potentially affected by CVE-2026-48828 via apache-airflow (2.1.0)

apache-airflow PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - example-pkg-naturalett =14.4.0, =14.4.6 Source cves: CVE-2026-48828 Source advisory: OSV:PYSEC-2026-3806...

adaptiq (0.12.9), agentic-ai-vass-tools (>=0.1.0, <=0.4.0) +13 more potentially affected by CVE-2026-62240 via crewai-tools (0.76.0)

crewai-tools PYPI version 0.76.0 is affected by a known vulnerability. The following packages have a transitive dependency on crewai-tools and may be impacted: - adaptiq 0.12.9 - agentic-ai-vass-tools =0.1.0, =0.1.7, =0.2.6, =0.1.0, =0.5.42, =0.74.0, =0.0.24, =0.1.0, =0.0.14, =0.1.0, =0.0.1,...

soda-sql (>=2.0.0b17, <=2.0.0b27), soda-sql-snowflake (>=2.1.0b12, <=2.1.6) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.4.0)

snowflake-connector-python PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - soda-sql =2.0.0b17, =2.1.0b12, =2.1.6 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...