Skip to content
OpenAdvisories

Vendor

huggingface

40 known vulnerabilities.

Products

huggingface/transformers 20 diffusers 4 datasets 3 huggingface/smolagents 2 huggingface/text-generation-inference 2 smolagents 2 transformers 1 peft 1 tokenizers 1 text-generation-inference 1 accelerate 1 LeRobot 1 finetrainers 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.4
    CVE-2024-3568 Public exploit

    Arbitrary Code Execution via Deserialization in huggingface/transformers

    The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by craf…

    huggingface huggingface/transformers transformers PyPI