Skip to content
OpenAdvisories

Package · PyPI

sentence-transformers

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2026-68770

    sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

    sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_class helper within sentence_transformers/util/misc.py, where the guard condition …

    Hugging Face sentence-transformers open-webui sentence-transformers Wolfi PyPI