Browse CVEs

MEDIUM 6.5 CVE-2026-66007 Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadat… Datasets No fix yet Fix from $1,6002026-07-24 CRITICAL 10.0 CVE-2026-4963 A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the… Smolagents Mitigation only Fix from $2,3002026-03-27 HIGH 7.8 CVE-2025-14928 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allo… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14930 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14920 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote att… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14921 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14924 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attac… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14926 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14927 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec… Transformers Mitigation only Fix from $1,9502025-12-23