Skip to content
OpenAdvisories

Package · PyPI

text-generation

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2026-0599 EPSS 29%

    Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

    A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching during input validation in VLM mode. The issue arises when the router scans inputs for Markdown image l…

    Hugging Face huggingface/text-generation-inference text-generation PyPI
  • Medium 4.4
    CVE-2024-3924

    Code Injection in huggingface/text-generation-inference

    A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the `autodocs.yml` workflow file. The vulnerability arises from the insecure handling of the `github.head_ref` user input, which is used to dyna…

    Hugging Face huggingface/text-generation-inference text-generation PyPI