Skip to content
OpenAdvisories

Vendor

Hugging Face

20 known vulnerabilities.

Products

Transformers 12 LeRobot 2 Text Embeddings Inference 1 sentence-transformers 1 Accelerate 1 PyTorch Image Models 1 Diffusers 1 smolagents 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2024-11394 Public exploit

    Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requir…

    Hugging Face Transformers transformers PyPI
  • High 8.8
    CVE-2024-11393 Public exploit

    Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is …

    Hugging Face Transformers transformers PyPI
  • High 7.5
    CVE-2024-11392 Public exploit

    Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requi…

    Hugging Face Transformers transformers PyPI