CVE-2026-85670

A flaw was found in the Hugging Face tokenizers library. A remote attacker could provide a specially crafted tokenizer.json file, which, when processed, leads to an out-of-bounds buffer access. This vulnerability can cause the application to terminate, resulting in a denial of service. In certain...