| CVE-2026-80047 |
A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to…
|
7.8
Élevée
|
1 sept. 2026 |
| CVE-2025-14930 |
Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2025-14928 |
Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2025-14924 |
Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2025-14920 |
Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2025-14926 |
Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2025-14927 |
Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2025-14921 |
Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2025-14929 |
Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution…
|
7.8
Élevée
|
23 déc. 2025 |
| CVE-2024-11394 |
Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
8.8
Élevée
|
22 nov. 2024 |
| CVE-2024-11393 |
Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
8.8
Élevée
|
22 nov. 2024 |
| CVE-2024-11392 |
Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability
|
7.5
Élevée
|
22 nov. 2024 |