huggingface Latest Vulnerabilities
Latest vulnerabilities published by huggingface
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Arbitrary Code Execution in Hugging Face PEFT Modules
CVE-2026-71281HuggingfacePeft8.8HIGHPath Traversal Vulnerability in Hugging Face Transformers by Hugging Face
CVE-2026-9856HuggingfaceHuggingface/transformers7.1HIGHPath Traversal Vulnerability in Hugging Face Datasets Product
CVE-2026-66007HuggingfaceDatasets👾🟡6.9MEDIUMSymlink-Following Vulnerability in Hugging Face Datasets by Hugging Face
CVE-2026-65010HuggingfaceDatasets👾🟡4.4MEDIUMPath Traversal Vulnerability in Diffusers by Hugging Face
CVE-2026-65920HuggingfaceDiffusers👾🟡5.3MEDIUMBypass Vulnerability in Hugging Face Diffusers Library
CVE-2026-45804HuggingfaceDiffusers7.5HIGHArbitrary Code Execution Vulnerability in Hugging Face Transformers Product
CVE-2026-5241HuggingfaceHuggingface/transformers8HIGHRemote Code Execution Vulnerability in HuggingFace Transformers Library
CVE-2026-4372HuggingfaceHuggingface/transformers7.8HIGHRemote Code Execution Vulnerability in Diffusers Library by Hugging Face
CVE-2026-44827HuggingfaceDiffusers8.8HIGHRemote Code Execution Vulnerability in Diffusers Library by Hugging Face
CVE-2026-44513HuggingfaceDiffusers8.8HIGHArbitrary Code Execution Vulnerability in HuggingFace Transformers Library
CVE-2026-1839HuggingfaceHuggingface/transformers6.5MEDIUMCode Injection Vulnerability in Hugging Face Smolagents Affects Local Python Executor
CVE-2026-4963HuggingfaceSmolagents👾🟡5.3MEDIUMServer-Side Request Forgery Vulnerability in Hugging Face Smolagents
CVE-2026-2654HuggingfaceSmolagents👾🟡5.3MEDIUMRemote Code Execution Vulnerability in Hugging Face's Text Generation Inference
CVE-2026-0599HuggingfaceHuggingface/text-gener...EPSS 22%7.5HIGHXPath Injection Vulnerability in Hugging Face Smolagents Web Automation Tool
CVE-2025-11844HuggingfaceHuggingface/smolagents5.4MEDIUMRegular Expression Denial of Service in Hugging Face Transformers Library
CVE-2025-6921HuggingfaceHuggingface/transformers5.3MEDIUMMissing Authentication in Hugging Face LeRobot Component
CVE-2025-10772HuggingfaceLerobot5.3MEDIUMReDoS Vulnerability in Hugging Face Transformers Library
CVE-2025-6051HuggingfaceHuggingface/transformers5.3MEDIUMRegular Expression Denial of Service in Hugging Face Transformers Library
CVE-2025-6638HuggingfaceHuggingface/transformers5.3MEDIUMReDoS Vulnerability in Hugging Face Transformers Library
CVE-2025-5197HuggingfaceHuggingface/transformers5.3MEDIUMSandbox Escape Vulnerability in Hugging Face SmolAgents Product
CVE-2025-5120HuggingfaceHuggingface/smolagentsEPSS 18%10CRITICALRegular Expression Exploit in Hugging Face Transformers Library
CVE-2025-3933HuggingfaceHuggingface/transformers5.3MEDIUMImproper Input Validation in Hugging Face Transformers Affects Multiple Versions
CVE-2025-3777HuggingfaceHuggingface/transformers3.5LOWRegular Expression Denial of Service Vulnerability in Hugging Face Transformers Library
CVE-2025-3264HuggingfaceHuggingface/transformers5.3MEDIUMRegular Expression Denial of Service in Hugging Face Transformers Library
CVE-2025-3263HuggingfaceHuggingface/transformers5.3MEDIUM