183 matches found
CVE-2025-14925 Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target...
CVE-2025-14925
CVE-2025-14925 affects Hugging Face Accelerate. The vulnerability stems from improper validation during parsing of checkpoints, enabling deserialization of untrusted data. An attacker can trigger remote code execution by convincing a user to visit a malicious page or open a crafted file, with cod...
Deserialization of Untrusted Data
Overview accelerate is an Accelerate Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the parsing of checkpoints. An attacker can execute arbitrary code by convincing a user to open a specially crafted file or visit a malicious web page. Note: The report w...
CVE-2025-14925 Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target...
CVE-2025-14925: Deserialization of Untrusted Data
Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target...
Hugging Face Accelerate code issue vulnerabilities
Hugging Face Accelerate is a lightweight tool library for Python open sourced by Hugging Face. A code issue vulnerability exists in Hugging Face Accelerate that stems from a lack of validation of user-supplied data when parsing checkpoints, which could lead to deserialization of untrusted data an...
(0Day) Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
PT-2025-52382
Name of the Vulnerable Software and Affected Versions Hugging Face Accelerate affected versions not specified Description A flaw exists in Hugging Face Accelerate that allows remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, such as visiting a...
EUVD-2019-4095
Malware in sbrugna...
Malicious code in generator-accelerate-node-api (npm)
The package generator-accelerate-node-api was found to contain malicious code...
Malicious code in generator-accelerate-node-microservice (npm)
The package generator-accelerate-node-microservice was found to contain malicious code...
Malicious code in generator-accelerate-react-native (npm)
The package generator-accelerate-react-native was found to contain malicious code...
Malicious code in generator-accelerate-mern (npm)
The package generator-accelerate-mern was found to contain malicious code...
MAL-2025-21265 Malicious code in generator-accelerate-mongodb (npm)
The package generator-accelerate-mongodb was found to contain malicious code...
Malicious code in accelerate-cli (npm)
The package accelerate-cli was found to contain malicious code...
Malicious code in generator-accelerate-react (npm)
The package generator-accelerate-react was found to contain malicious code...
Malicious code in generator-accelerate-couchdb (npm)
The package generator-accelerate-couchdb was found to contain malicious code...
Malicious code in generator-accelerate-data-transform (npm)
The package generator-accelerate-data-transform was found to contain malicious code...