Insecure Temporary File in huggingface/transformers
CVE-2023-2800

4.7MEDIUM

Key Information:

Vendor: Huggingface
Status: Huggingface/transformers
Vendor: CVE Published:; 18 May 2023

🔔 Create Huggingface Vulnerability Alert

What is CVE-2023-2800?

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

huggingface/transformers < 4.30.0

References

https://huntr.dev/bounties/a3867b4e-6701-4418-8c20-3c6e70...

https://github.com/huggingface/transformers/commit/80ca92...

CVSS V3.1

Score:

4.7

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
May 18, 2023
Vulnerability Reserved
May 18, 2023

JSON

Huggingface

What is CVE-2023-2800?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.