126 matches found
PYSEC-2023-299
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...
PYSEC-2023-299
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...
CVE-2023-2800
CVE-2023-2800 affects Hugging Face Transformers (prior to 4.30.0). Insecure temporary file creation via tempfile.mktemp() could enable local denial of service. The IBM/IBM Cloud Pak bulletin and GH advisories confirm the workaround: upgrade Transformers to 4.30.0 or newer.
PT-2023-21473
Name of the Vulnerable Software and Affected Versions huggingface/transformers versions prior to 4.30.0 Description The issue is related to an insecure temporary file in the GitHub repository huggingface/transformers. A fix is available and has been released as part of version 4.30.0...
