Lucene search
+L

1 matches found

CNNVD
CNNVD
•added 2026/10/23 12:00 a.m.•9 views

Hugging Face Datasets deserialization injection vulnerability

Versions 5.1.0 and earlier of Hugging Face Datasets contain a deserialization injection vulnerability. This vulnerability stems from unsafe deserialization; attackers can load specially crafted pickle files using the deprecated pandas packaging builder. Additionally, Pandas.generatetables process...

8.8CVSS6.4AI score0.00547EPSS
SaveExploits1References3
Rows per page
Query Builder