CVE-2023-2800 Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0

Description

Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.

Affected products and versions

Product	Affected versions	Fixed in
huggingface/transformers 4.30	earliest → < 4.30.0	4.30.0

Other CVEs of huggingface/transformers

The 20 CVEs of huggingface/transformers →

CVE-2026-9856 A vulnerability in huggingface/transformers… 7.1 High CVE-2026-5241 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an… 8.0 High CVE-2026-4372 A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to… 7.8 High CVE-2026-1839 A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary… 6.5 Medium