flambe (>=0.4.11, <=0.4.13) potentially affected by CVE-2024-11394 via transformers (2.2.2)

transformers PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flambe =0.4.11, =0.4.13 Source cves: CVE-2024-11394 Source advisory: OSV:GHSA-HXXF-235M-72V3...

allennlp (>=1.0.0rc4.dev20200513, <=1.0.0rc6.dev20200601), allennlp-models (>=1.0.0rc4, <=1.0.0rc5) potentially affected by CVE-2024-11392 via transformers (2.9.1)

transformers PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc4.dev20200513, =1.0.0rc4, =1.0.0rc5 Source cves: CVE-2024-11392 Source advisory: OSV:GHSA-QXRP-VHVM-J765...

allennlp (1.2.0rc1.dev20200923), awca (>=0.0.2, <=0.0.3.2) +9 more potentially affected by CVE-2024-11394 via transformers (3.1.0)

transformers PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 1.2.0rc1.dev20200923 - awca =0.0.2, =0.2.4, =0.4.8, =1.1.1, =1.1.0.dev202009251125, =2.1.0, =1.0.1, =1.1.0 Source cves:...

allennlp (>=1.2.0rc1.dev20201022, <=1.2.1), allennlp-models (>=1.2.0rc1.dev20201022, <=1.2.1) +5 more potentially affected by CVE-2024-11394 via transformers (3.4.0)

transformers PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.2.0rc1.dev20201022, =1.2.0rc1.dev20201022, =0.0.4, =0.0.1, =2.2.5, =2.3.1 Source cves: CVE-2024-11394 Source advisory:...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2024-11394 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2024-11394 Source advisory: OSV:GHSA-HXXF-235M-72V3...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2024-11392 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves:...

3m (0.1.0), aaa-ml-datasets-course (1.0.0) +1443 more potentially affected by CVE-2024-11392 via transformers (>=4.0.0rc1, <=4.47.1)

transformers PYPI version =4.0.0rc1, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.0, =0.1.1 - advtok 0.0.2 and more Source cves: CVE-2024-11392 Source advisory: SNYK:PYTHON-TRANSFORMERS-8400822...

Deserialization of Untrusted Data

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the handling of configuration files. This is only exploitable if the target visits a malicious page or opens a...

Deserialization of Untrusted Data

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the parsing of model files, due to the lack of proper validation of user-supplied data. This is only exploitab...

3m (0.1.0), aaa-ml-datasets-course (1.0.0) +1443 more potentially affected by CVE-2024-11393 via transformers (>=4.0.0rc1, <=4.47.1)

transformers PYPI version =4.0.0rc1, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.0, =0.1.1 - advtok 0.0.2 and more Source cves: CVE-2024-11393 Source advisory: SNYK:PYTHON-TRANSFORMERS-8400823...

Deserialization of Untrusted Data

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the handling of model files, due to the lack of proper validation of user-supplied data. This is only...

3m (0.1.0), aaa-ml-datasets-course (1.0.0) +1443 more potentially affected by CVE-2024-11394 via transformers (>=4.0.0rc1, <=4.47.1)

transformers PYPI version =4.0.0rc1, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.0, =0.1.1 - advtok 0.0.2 and more Source cves: CVE-2024-11394 Source advisory: SNYK:PYTHON-TRANSFORMERS-8400820...

allennlp (>=1.0.0rc4.dev20200513, <=1.0.0rc6.dev20200601), allennlp-models (>=1.0.0rc4, <=1.0.0rc5) potentially affected by CVE-2024-11394 via transformers (2.9.1)

transformers PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc4.dev20200513, =1.0.0rc4, =1.0.0rc5 Source cves: CVE-2024-11394 Source advisory: OSV:PYSEC-2024-229...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2024-11394 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2024-11394 Source advisory: OSV:PYSEC-2024-229...

allennlp (>=0.9.1.dev20200220, <=0.9.1.dev20200401), anilv-interpret-text (0.0.1) +9 more potentially affected by CVE-2024-11394 via transformers (2.4.1)

transformers PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200220, =0.5.8, =0.1.2, =0.0.12b0, =1.0.1, =1.0.0.dev202005031000, =0.1.1, =0.2.2, =0.3.0, =0.5.11 Source cves:...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2024-11394 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2024-11394 Source advisory:...

pvqa (0.0.2.1) potentially affected by CVE-2024-11394 via transformers (2.1.1)

transformers PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - pvqa 0.0.2.1 Source cves: CVE-2024-11394 Source advisory: OSV:PYSEC-2024-229...

adaptnlp (>=0.2.0, <=0.2.2), allennlp (1.2.2) +29 more potentially affected by CVE-2024-11394 via transformers (3.5.1)

transformers PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptnlp =0.2.0, =0.0.7, =0.2.0, =0.0.1, =0.0.1, =0.1.8, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2024-11394 Source advisory:...

nlp2go (>=0.2.5, <=0.4.9), nlprep (>=0.1.56, <=0.1.57) +2 more potentially affected by CVE-2024-11394 via transformers (3.3.0)

transformers PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp2go =0.2.5, =0.1.56, =0.2.11, =0.4.11, =0.5.13 Source cves: CVE-2024-11394 Source advisory: OSV:PYSEC-2024-229...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2024-11393 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2024-11393 Source advisory: OSV:PYSEC-2024-228...