245 matches found
PYSEC-2023-299
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...
4.7CVSS4.7AI score0.00282EPSS
SaveExploits1References5
CVE-2023-2800
CVE-2023-2800 affects Hugging Face Transformers (prior to 4.30.0). Insecure temporary file creation via tempfile.mktemp() could enable local denial of service. The IBM/IBM Cloud Pak bulletin and GH advisories confirm the workaround: upgrade Transformers to 4.30.0 or newer.
4.7CVSS4.6AI score0.00282EPSS
SaveExploits1References2Affected Software1
CVE-2023-2800 Insecure Temporary File in huggingface/transformers
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0...
4.7CVSS5AI score0.00282EPSS
SaveExploits1References2
20