Skip to content
OpenAdvisories

Package · PyPI

text-generation

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2024-3924

    Code Injection in huggingface/text-generation-inference

    A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the `autodocs.yml` workflow file. The vulnerability arises from the insecure handling of the `github.head_ref` user input, which is used to dyna…

    Hugging Face huggingface/text-generation-inference text-generation PyPI