EasyOCR

EasyOCR Ready-to-use OCR with 80+ supported languages and all popular writing scripts including: Latin, Chinese, Arabic, Devanagari, Cyrillic, etc. Try Demo on our website Integrated into Huggingface Spaces 🤗 using Gradio. Try out the Web Demo: What's new...

OpenAttack

Documentación • Características y Usos • Ejemplos de Uso • Modelos de Ataque • Diseño del Toolkit OpenAttack es un kit de herramientas de ataque adversarial textual de código abierto basado en Python, que maneja todo el proceso de ataque adversarial textual, incluyendo preprocesamiento de texto,...

CVE-2024-11392

CVE-2024-11392 Vulnerabilidad de Ejecución Remota de Código por Deserialización de Datos No Confiables en Hugging Face Transformers MobileViTV2 Resumen de alto nivel y efectos de la vulnerabilidad: La vulnerabilidad permite a un atacante ejecutar código arbitrario en la máquina anfitriona al...

CVE-2024-11394

CVE-2024-11394 Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en el modelo Trax de Hugging Face Transformers Descripción general y efectos de la vulnerabilidad: La vulnerabilidad permite a un atacante ejecutar código arbitrario en la máquina anfitriona al...

CVE-2026-23001-Hugging-Face-Transformers-Model-Deserialization-Arbitrary-Code-via-Pickle-

CVE-2026-23001 – Hugging Face Transformers Model Deserialization RCE Overview Hugging Face models saved with torch.save use Python’s pickle serialization, which is inherently unsafe. If a user downloads a seemingly legitimate model from a repository, loading it can trigger arbitrary code executio...

FULL-ANALYSIS---CVE-2026-45829-ChromaDB-

CVE-2026-45829 - ChromaDB Pre-Auth RCE CVSS 10.0 ⚠️ ADVERTENCIA Este repositorio contiene una PoC FUNCIONAL para CVE-2026-45829. SOLO para pruebas autorizadas en entornos controlados. Descripción Vulnerabilidad crítica en ChromaDB versiones 1.0.0 a 1.5.8 que permite a un atacante no autenticado...

CVE-2025-11844-smolagents

🔐 Marco de Simulación de Inyección XPath de Smolagents CVE-2025-11844 Un sandbox educativo de auditoría y un escáner dinámico de prueba de concepto que demuestra la vulnerabilidad de inyección XPath encontrada en la biblioteca smolagents de Hugging Face hasta la versión 1.2.0. 🔍 Perfil de...

llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecode Proof of concept for CVE-2026-58116 CVSS 9.8 Critical: remote code execution in LLaMA-Factory = v0.9.5. The LLaMA-Factory WebUI hardcodes trustremotecode=True when loading a model src/llamafactory/webui/chatter.py:139 and...

CVE-2024-11393

CVE-2024-11393 Hugging Face Transformers MaskFormer 모델의 신뢰할 수 없는 데이터 역직렬화 원격 코드 실행 취약점 취약점의 개요 및 영향: 이 취약점을 통해 공격자는 Hugging Face Transformers 저장소의 convertmaskformerswintopytorch.py 스크립트에 악성 maskformer resnet 체크포인트 파일을 제공하여 호스트 머신에서 임의 코드를 실행할 수 있습니다. 아무것도 모르는 사용자가 제3자의 maskformer resnet 체크포인트 파일을...

CVE-2026-75104

A flaw was found in Hugging Face Transformers. Attackers can exploit this by supplying malicious checkpoint index files with parent-directory references or absolute paths that are not properly validated. This vulnerability allows for reading arbitrary files outside the model directory, leading to...

Pickle-Deserialization-Exploit-in-Transformers

Exploiting Pickle Deserialization Vulnerability in Transformers Experiment Introduction Introduces the pickle deserialization mechanism and its reduce attack principle, reproduces the deserialization vulnerability CVE-2024-3568 in the Hugging Face Transformers library, analyzes security risks in...

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

EUVD-2026-71971

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

CVE-2026-86169

Axolotl (through 0.18.0 ), a Python-based LLM fine-tuning framework, contains a remote code execution vulnerability in its multipack patch code path. The root cause is that the trust_remote_code parameter defaults to None instead of False, effectively bypassing the security guard. An attacker who...

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

PT-2026-86396

Name of the Vulnerable Software and Affected Versions Axolotl versions prior to 0.18.1 Description A remote code execution issue exists in the multipack patch path. The security guard is bypassed because the trust remote code variable defaults to None instead of False. An attacker can execute...

EUVD-2026-71126

tokenizers Hugging Face is affected by an out-of-bounds buffer access in BpeBuilder::build tokenizers/src/models/bpe/model.rs. When loading a tokenizer.json via Tokenizer::fromfile/fromstr, the builder sizes a scratch buffer to the longest vocabulary key, then writes each concatenated merge rule...

CVE-2026-85670 tokenizers BpeBuilder Buffer Overflow via merge token

tokenizers Hugging Face is affected by an out-of-bounds buffer access in BpeBuilder::build tokenizers/src/models/bpe/model.rs. When loading a tokenizer.json via Tokenizer::fromfile/fromstr, the builder sizes a scratch buffer to the longest vocabulary key, then writes each concatenated merge rule...

CVE-2026-80047

A vulnerability in Hugging Face Transformers versions = 4.49.0 and = 5.8.1 allows remote Python files to be written to local disk without user consent when using GenerativePreTrainedModel.loadcustomgenerate. The function fetches and caches a remote module file before performing the required...