flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2026-9856 via transformers (2.2.2)

transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...