Hugging Face Transformers: Hugging Face Transformers downloads custom generation code before trust consent
Affects: Hugging Face Transformers
Hugging Face Transformers vulnerabilities
- Product
- Hugging Face Transformers
- Vendor
- Hugging Face
- Kind
- Machine learning library
Securaity has published 4 advisories for Hugging Face Transformers: 1 Critical, 3 High.
Hugging Face Transformers is a machine learning library from Hugging Face, which maintains it. It is a code library that developers use to download, run and adapt pre-trained AI models in their own programs. The people who usually install and run it are developers and data scientists who work with pre-trained models in their own code. Transformers runs inside the programs of the teams that install it, on their own computers or servers.
Advisories
Hugging Face Transformers: Transformers save_pretrained path traversal allows arbitrary file writes through chat template…
Affects: Hugging Face Transformers
Hugging Face Transformers: huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue…
Affects: Hugging Face Transformers
Hugging Face Transformers: HuggingFace transformers vulnerable to remote code execution
Affects: Hugging Face Transformers