CVE-2023-2800

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

PYSEC-2023-299

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

PYSEC-2023-299

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

CVE-2023-2800: Insecure Temporary File

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

PT-2023-21473

Name of the Vulnerable Software and Affected Versions huggingface/transformers versions prior to 4.30.0 Description The issue is related to an insecure temporary file in the GitHub repository huggingface/transformers. A fix is available and has been released as part of version 4.30.0...

CVE-2023-2800

CVE-2023-2800 affects Hugging Face Transformers (prior to 4.30.0). Insecure temporary file creation via tempfile.mktemp() could enable local denial of service. The IBM/IBM Cloud Pak bulletin and GH advisories confirm the workaround: upgrade Transformers to 4.30.0 or newer.

CVE-2023-2800 Insecure Temporary File in huggingface/transformers

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

Hugging Face Transformers 安全漏洞

Hugging Face Transformers is advanced natural language processing for Jax, PyTorch and TensorFlow. A security vulnerability exists in Hugging Face Transformers versions prior to 4.30.0, which stems from the presence of an insecure temporary file in the program...

CVE-2023-2800

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

CVE-2023-2800 Insecure Temporary File in huggingface/transformers

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

CVE-2023-2800 Insecure Temporary File in huggingface/transformers

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...

GHSA-F2C9-5JQW-3XH3 Cross-Site Scripting in Qiita-Markdown

Increments Qiita-Markdown before 0.33.0 allows XSS in transformers...

Cross-Site Scripting in Qiita-Markdown

Increments Qiita-Markdown before 0.33.0 allows XSS in transformers...

Cross-Site Scripting in Qiita::Markdown

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

Cross-site Scripting (XSS)

Overview qiita-markdown is a Qiita-specified markdown processor. Affected versions of this package are vulnerable to Cross-site Scripting XSS. Increments Qiita::Markdown allows XSS in transformers. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” ...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

Cross site scripting

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...

CVE-2021-28796

Increments Qiita::Markdown before 0.33.0 allows XSS in transformers...