Read the docs

huggingface

Records59All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

huggingface records in CISA KEV

No huggingface vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Transformers 30 records HIGH Smolagents 4 records HIGH Diffusers 3 records HIGH Datasets 1 record MEDIUM Lerobot 1 record HIGH

Records

1 record in Datasets · all components

TI-2026-47005 CVE-2026-66007 · GHSA-379c-qx7v-6h59

Datasets Path Traversal via Unsanitized file_name Metadata

Priority MEDIUM 64

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset di…

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.0055 Published 2026-07-24 Partial fix · 5.0.1 CWE-22
Open these records in search →