autotrain-advanced (>=0.7.114, <=0.7.127), camel-oasis (>=0.0.1, <=0.2.5) +8 more potentially affected by CVE-2026-68770 via sentence-transformers (3.0.0)

sentence-transformers PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - autotrain-advanced =0.7.114, =0.0.1, =1.0.1, =0.0.1, =0.1.0, =1.1.0, =0.0.5, =0.0.8 Source cves: CVE-2026-68770 Source...

airunner (>=3.0.0, <=3.1.7), anovos (>=0.2.0, <=1.0.1) +55 more potentially affected by CVE-2026-68770 via sentence-transformers (3.0.1)

sentence-transformers PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - airunner =3.0.0, =0.2.0, =0.7.128, =0.0.4, =0.3.3, =0.2.0, =0.0.2, =2.0.0, =0.2.11, =0.2.1.dev0, =0.2.1.dev0, =0.0.71,...

hypertag (>=0.4.0, <=0.6.3.3.1), pororo (0.3.1) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.1.2)

sentence-transformers PYPI version 0.4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - hypertag =0.4.0, =0.6.3.3.1 - pororo 0.3.1 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

awessome (>=0.0.1, <=0.0.14), bani (>=0.1.0, <=0.7.2) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (0.3.8)

sentence-transformers PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - awessome =0.0.1, =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

contextualized-topic-models (>=1.4.3, <=1.5.0) potentially affected by CVE-2026-68770 via sentence-transformers (0.3.5.1)

sentence-transformers PYPI version 0.3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - contextualized-topic-models =1.4.3, =1.5.0 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

aces-metric (>=0.0.3, <=0.0.4), adv-bible-search (>=0.1.0, <=0.1.1) +154 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.2)

sentence-transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - aces-metric =0.0.3, =0.1.0, =0.1.5, =1.2.3, =0.8.0, =1.0.1, =0.0.5.dev0, =0.1.0, =0.1.5.1, =0.1.1, =0.0.2, =0.0.5,...

GHSA-JHR6-GM9C-RQJV sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

russian-paraphrasers (0.0.3) potentially affected by CVE-2026-68770 via sentence-transformers (0.4.0)

sentence-transformers PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - russian-paraphrasers 0.0.3 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

anyclassifier (>=0.1.1, <=0.2.0), autotrain-advanced (>=0.8.21, <=0.8.25) +23 more potentially affected by CVE-2026-68770 via sentence-transformers (3.1.1)

sentence-transformers PYPI version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - anyclassifier =0.1.1, =0.8.21, =0.2.2.dev0, =0.1.1, =3.0.0, =0.1.4, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0,...

khoj-assistant (>=0.1.0, <=0.3.0a1676209086), pyconverse (0.1.0) +1 more potentially affected by CVE-2026-68770 via sentence-transformers (2.1.0)

sentence-transformers PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - khoj-assistant =0.1.0, =0.0.3, =0.0.6 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

algorin-cli (>=0.0.1, <=0.21.0) potentially affected by CVE-2026-68770 via sentence-transformers (2.5.0)

sentence-transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - algorin-cli =0.0.1, =0.21.0 Source cves: CVE-2026-68770 Source advisory: OSV:GHSA-JHR6-GM9C-RQJV...

CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

EUVD-2026-51650

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-68770

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

CVE-2026-68770

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...

aait (>=0.0.4.80, <=2.3.14), aana (>=0.2.1, <=0.2.2.2) +840 more potentially affected by CVE-2026-68770 via sentence-transformers (>=0.2.5.1, <=5.5.1)

sentence-transformers PYPI version =0.2.5.1, =0.0.4.80, =0.2.1, =1.0.32, =0.0.3, =0.0.2, =0.1.0, =0.1.0, =5.0.0, =5.0.0, =0.1.0, =0.1.1, =0.1.5, =0.1.35 and more Source cves: CVE-2026-68770 Source advisory: MEND:CVE-2026-68770...

PT-2026-105526

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import module class helper within sentence transformers/util/misc.py, where the guard condition includes an 'or os.path.existsmodel na...

CVE-2026-68770: Improper Control of Generation of Code

sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the importmoduleclass helper within sentencetransformers/util/misc.py, where the guard condition includes an 'or...