avalan (>=1.0.5, <=1.1.5), deepmost (0.5.2) +11 more potentially affected by CVE-2026-5241 via transformers (4.52.3)

transformers PYPI version 4.52.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - avalan =1.0.5, =0.1.2, =0.0.0, =0.8.2, =1.3.0, =0.2.0, =0.1.8, =0.2.0 Source cves: CVE-2026-5241 Source advisory: OSV:GHSA-FGCW-684Q-JJ...