autotrain-advanced (0.8.6) potentially affected by CVE-2026-9856 via transformers (4.43.0)

transformers PYPI version 4.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced 0.8.6 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...