document-qa-engine (>=0.5.1, <=0.6.0), explainitall (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2026-68770 via sentence-transformers (2.6.1)

sentence-transformers PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - document-qa-engine =0.5.1, =1.0.0, =1.2.0, =0.0.14, =0.1.1, =0.1.3, =0.0.2, =0.0.3, =0.0.2, =0.1.5 Source cves:...

pdf2emb-nlp (0.1.3), pdf2embeddings (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.2.5.1)

sentence-transformers PYPI version 0.2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - pdf2emb-nlp 0.1.3 - pdf2embeddings =0.1.0, =0.1.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

wordtransformer (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-68770 via sentence-transformers (2.3.0)

sentence-transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - wordtransformer =0.0.2, =0.0.4 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

contextualized-topic-models (>=1.5.2, <=1.7.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.6)

sentence-transformers PYPI version 0.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.5.2, =1.7.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

contextualized-topic-models (>=1.4.3, <=1.5.0) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.5.1)

sentence-transformers PYPI version 0.3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.4.3, =1.5.0 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

contextualized-topic-models (>=2.0.0, <=2.1.1) potentially affected by CVE-2026-68770 via sentence-transformers (1.1.1)

sentence-transformers PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =2.0.0, =2.1.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

contextualized-topic-models (1.4.2) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.2)

sentence-transformers PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models 1.4.2 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

contextualized-topic-models (>=1.8.0, <=1.8.2) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.1)

sentence-transformers PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.8.0, =1.8.2 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), pyconverse (0.1.0) +1 more potentially affected by CVE-2026-68770 via sentence-transformers (2.1.0)

sentence-transformers PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - khoj-assistant =0.1.0, =0.0.3, =0.0.6 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

aces-metric (>=0.0.3, <=0.0.4), adv-bible-search (>=0.1.0, <=0.1.1) +154 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.2)

sentence-transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - aces-metric =0.0.3, =0.1.0, =0.1.5, =1.2.3, =0.8.0, =1.0.1, =0.0.5.dev0, =0.1.0, =0.1.5.1, =0.1.1, =0.0.2, =0.0.5,...

conversation-qa (0.0.9), creak-sense (>=0.0.1, <=0.0.2) +5 more potentially affected by CVE-2026-68770 via sentence-transformers (2.0.0)

sentence-transformers PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - conversation-qa 0.0.9 - creak-sense =0.0.1, =0.1.0, =0.1.1, =0.1.1, =0.0.1, =0.0.2 Source cves: CVE-2026-68770 Source...

amapy-server (>=1.0.1, <=1.0.2), arm-rag-testing (>=0.0.1, <=7.7.9) +16 more potentially affected by CVE-2026-68770 via sentence-transformers (3.2.1)

sentence-transformers PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - amapy-server =1.0.1, =0.0.1, =0.8.26, =0.0.1, =0.1.1, =0.1.5, =0.5.0, =0.1.3, =1.0.2, =1.0.11 and more Source cves:...

PYSEC-2026-4164 sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

aiology (0.0.4), argentic (>=0.6.0, <=0.8.20) +64 more potentially affected by CVE-2026-68770 via sentence-transformers (4.1.0)

sentence-transformers PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - aiology 0.0.4 - argentic =0.6.0, =0.1.5, =0.2.0, =0.5.9, =0.1.0, =0.1.1, =0.1.0a1, =0.8.0, =0.5.5, =0.2.0, =0.3.0,...

askdoc (0.1.1), conflare (>=0.1.2, <=0.1.3) +6 more potentially affected by CVE-2026-68770 via sentence-transformers (2.3.1)

sentence-transformers PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - askdoc 0.1.1 - conflare =0.1.2, =0.1.9, =1.5.2.dev14, =0.1.0, =0.7.0 - raga-llm-eval 1.0.0 - team-comm-tools 0.1.0...

smartgenai (>=0.1.0.0, <=0.1.0.1) potentially affected by CVE-2026-68770 via sentence-transformers (2.6.0)

sentence-transformers PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - smartgenai =0.1.0.0, =0.1.0.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

autotrain-advanced (>=0.7.114, <=0.7.127), camel-oasis (>=0.0.1, <=0.2.5) +8 more potentially affected by CVE-2026-68770 via sentence-transformers (3.0.0)

sentence-transformers PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - autotrain-advanced =0.7.114, =0.0.1, =1.0.1, =0.0.1, =0.1.0, =1.1.0, =0.0.5, =0.0.8 Source cves: CVE-2026-68770 Source...

byudml (>=0.7.4, <=0.7.7) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.0)

sentence-transformers PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - byudml =0.7.4, =0.7.7 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

hypertag (>=0.4.0, <=0.6.3.3.1), pororo (0.3.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.1.2)

sentence-transformers PYPI version 0.4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - hypertag =0.4.0, =0.6.3.3.1 - pororo 0.3.1 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...

russian-paraphrasers (0.0.3) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.0)

sentence-transformers PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - russian-paraphrasers 0.0.3 Source cves: CVE-2026-68770 Source advisory: OSV:PYSEC-2026-4164...