mlserver-huggingface (>=1.2.0.dev14, <=1.2.0rc3), wildtime (>=1.0.0, <=1.1.3) potentially affected by CVE-2026-9856 via transformers (4.21.1)

transformers PYPI version 4.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - mlserver-huggingface =1.2.0.dev14, =1.0.0, =1.1.3 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...