Skip to content
OpenAdvisories

Product · Hugging Face

finetrainers

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-124588

    huggingface finetrainers Model Index model.py resolve_component_cls code injection

    A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function resolve_component_cls of the file finetrainers/utils/model.py of the component Model Index Handler. Performing a manipulation of the argument Lib…

    Hugging Face finetrainers