Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.3 views

PYSEC-2026-3066 Hugging Face Smolagents has an Injection issue

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...

6.3CVSS6.4AI score0.00575EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2026/03/28 11:9 p.m.7 views

CVE-2026-4963

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...

7.6CVSS6.3AI score0.00575EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/27 6:31 p.m.7 views

EUVD-2026-16726

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...

7.6CVSS6.3AI score0.00575EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
added 2026/03/27 6:31 p.m.14 views

Hugging Face Smolagents has an Injection issue

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...

10CVSS6.3AI score0.00575EPSS
SaveExploits1References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/27 5:5 p.m.5 views

CVE-2026-4963

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...

7.6CVSS6.3AI score0.00575EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder