Lucene search

Huggingface Security Vulnerabilities

cve

CVE-2024-3568

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the load_repo_checkpoint() function of the TFPreTrainedModel() class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload,...

3.4CVSS

9.2AI Score

0.0004EPSS

2024-04-10 05:15 PM

cve

CVE-2023-7018

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to...

9.6CVSS

7.3AI Score

0.001EPSS

2023-12-20 05:15 PM

cve

CVE-2023-6730

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to...

9CVSS

7.3AI Score

0.001EPSS

2023-12-19 01:15 PM

cve

CVE-2023-2800

Insecure Temporary File in GitHub repository huggingface/transformers prior to...

4.7CVSS

4.8AI Score

0.0004EPSS

2023-05-18 05:15 PM