EUVD-2026-119898

A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function resolvecomponentcls of the file finetrainers/utils/model.py of the component Model Index Handler. Performing a manipulation of the argument Library results in code injection. The atta...

CVE-2026-124588

A security flaw in huggingface finetrainers versions 0.1.0 and 0.2.0 allows for code injection via a remote attack. The vulnerability is located in the resolve_component_cls function within the finetrainers/utils/model.py file, specifically affecting the Model Index Handler component. The root ca...