deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.21.2)

transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-9856 Source advisory:...