LLM frameworks · Hugging Face
Hugging Face
transformers and the Hugging Face model hub.
3Advisories
1critical
2high
0medium
2024-11-23Latest
Timeline · advisories per quarter
12023 Q4
22024 Q4
Named in sources
Reported for Hugging Face
01. CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerabilityDeserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0. Hugging Face 2023-12-19 02. CVE-2024-11393: Deserialization of Untrusted Data in Hugging Face TransformersHugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. Hugging Face 2024-11-23 03. CVE-2024-11394: Deserialization of Untrusted Data in Hugging Face TransformersHugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. Hugging Face 2024-11-23
Hugging Face 2023-12-19 02. CVE-2024-11393: Deserialization of Untrusted Data in Hugging Face TransformersHugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. Hugging Face 2024-11-23 03. CVE-2024-11394: Deserialization of Untrusted Data in Hugging Face TransformersHugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. Hugging Face 2024-11-23