Skip to content

Vulnerabilities of huggingface datasets

Is your version affected?

CVE Summary Score Published
CVE-2026-57845 Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to… 8.7 High Oct 23, 2026
CVE-2026-66007 Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset… 6.9 Medium Jul 24, 2026
CVE-2026-65010 Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that… 4.4 Medium Jul 23, 2026

Other huggingface products