df-graph-construction (0.1.0), medcat (>=1.5.3, <=1.6.1) +1 more potentially affected by CVE-2026-66007 via datasets (2.2.2)

datasets PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - df-graph-construction 0.1.0 - medcat =1.5.3, =0.0.20, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

df-graph-construction (0.1.0), medcat (>=1.5.3, <=1.6.1) +1 more potentially affected by CVE-2026-66007 via datasets (2.2.2)

datasets PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - df-graph-construction 0.1.0 - medcat =1.5.3, =0.0.20, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

cltl-dialogue-evaluation (>=0.1.0.dev1, <=0.2.7.dev1), kwja (>=1.0.0, <=1.2.2) +6 more potentially affected by CVE-2026-4372 via transformers (4.19.4)

transformers PYPI version 4.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - cltl-dialogue-evaluation =0.1.0.dev1, =1.0.0, =1.5.3, =0.0.20, =1.3.0, =1.10.1 - zensols-spanmatch 0.0.1 Source cves: CVE-2026-4372...