Insecure Deserialization

huggingface transformers is vulnerable to Insecure Deserialization. The vulnerability is due to the ability to load arbitrary pickle files from other repos specified by the index_path while parsing the remote config.json fille. An attacker can exploit this flaw to execute arbitrary code on the victim machine by specifying a backend repo to pull a pickle file from in a public huggingface model.