Vulnerabilities of huggingface datasets
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-57845 | Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to… | 8.7 High | Oct 23, 2026 |
| CVE-2026-66007 | Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset… | 6.9 Medium | Jul 24, 2026 |
| CVE-2026-65010 | Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that… | 4.4 Medium | Jul 23, 2026 |