Vulnerability index

Browse CVEs

10 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Datasets MEDIUM 6.5
CVE-2026-66007

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadat…

No fix yet
Fix from $1,600 2026-07-24
Smolagents CRITICAL 10.0
CVE-2026-4963

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the…

Mitigation only
Fix from $2,300 2026-03-27
Transformers HIGH 7.8
CVE-2025-14928

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14929

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allo…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14930

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14920

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote att…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14921

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14924

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attac…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14926

Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14927

Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec…

Mitigation only
Fix from $1,950 2025-12-23