28 matches found
autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-9856 via transformers (4.41.0)
transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-9856...
finetune-eval-harness (>=0.5.0.dev0, <=0.6.12.dev1), modelscope (>=1.3.0, <=1.6.1) +3 more potentially affected by CVE-2026-66007 via datasets (2.8.0)
datasets PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - finetune-eval-harness =0.5.0.dev0, =1.3.0, =0.0.80, =0.0.0.15, =0.0.0.20 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...
eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-6577 via torchserve (>=0.0.1b20200409, <=0.7.1)
torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-6577 Source advisory: OSV:PYSEC-2026-1973...
wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2024-35199 via torchserve (0.7.1)
torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2024-35199 Source advisory: OSV:PYSEC-2026-1971...
wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2023-48299 via torchserve (0.7.1)
torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-48299 Source advisory: OSV:PYSEC-2026-1972...
wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2023-43654 via torchserve (0.7.1)
torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-43654 Source advisory: OSV:PYSEC-2026-553...
eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-35198 via torchserve (>=0.0.1b20200409, <=0.7.1)
torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-35198 Source advisory: OSV:PYSEC-2026-554...
autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-5241 via transformers (4.41.0)
transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-5241...
autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-4372 via transformers (4.41.0)
transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-4372...
autotrain-advanced (>=0.7.102, <=0.7.118), genrag (0.1.0) +9 more potentially affected by CVE-2026-1839 via transformers (4.41.0)
transformers PYPI version 4.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.7.102, =0.1.10, =0.1.0, =0.0.9, =0.0.3.post33, =0.0.1, =0.0.1, =0.0.90, =2.5.1, =2.5.5 Source cves: CVE-2026-1839...
happy-vllm (>=0.9.0, <=1.1.1), llumnix (0.0.2) +2 more potentially affected by CVE-2025-48887 via vllm (0.4.2)
vllm PYPI version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - happy-vllm =0.9.0, =0.0.83, =0.1.0 Source cves: CVE-2025-48887 Source advisory: OSV:PYSEC-2025-50...
happy-vllm (>=0.9.0, <=1.1.1), llumnix (0.0.2) +2 more potentially affected by CVE-2025-32444 via vllm (0.4.2)
vllm PYPI version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - happy-vllm =0.9.0, =0.0.83, =0.1.0 Source cves: CVE-2025-32444 Source advisory: OSV:PYSEC-2025-42...
eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-6577 via torchserve (>=0.0.1b20200409, <=0.7.1)
torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-6577 Source advisory: OSV:GHSA-XX7C-J7H3-VJCQ...
eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-6577 via torchserve (>=0.0.1b20200409, <=0.7.1)
torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-6577 Source advisory: GHSA-XX7C-J7H3-VJCQ...
eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-35198 via torchserve (>=0.0.1b20200409, <=0.7.1)
torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-35198 Source advisory: MEND:CVE-2024-35198...
wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2024-35199 via torchserve (0.7.1)
torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2024-35199 Source advisory: MEND:CVE-2024-35199...
wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2024-35199 via torchserve (0.7.1)
torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2024-35199 Source advisory: OSV:GHSA-HHPG-V63P-WP7W...
wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2024-35199 via torchserve (0.7.1)
torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2024-35199 Source advisory: GHSA-HHPG-V63P-WP7W...
eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-35198 via torchserve (>=0.0.1b20200409, <=0.7.1)
torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-35198 Source advisory: OSV:GHSA-WXCX-GG9C-FWP2...
eisen (0.1.9), eisen-deploy (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-35198 via torchserve (>=0.0.1b20200409, <=0.7.1)
torchserve PYPI version =0.0.1b20200409, =0.0.1, =0.0.80, =0.1.0 Source cves: CVE-2024-35198 Source advisory: GHSA-WXCX-GG9C-FWP2...