Advisoriesby IbisHugging Face security advisories
93 advisories across Transformers, Gradio, diffusers, datasets, Text Generation Inference, accelerate, Hugging Face
Hugging Face Transformers downloads custom generation code before trust consentTransformersCVE-2026-80047no fix yetAccelerate path traversal and denial of service via sharded checkpoint weight_map entriesaccelerateCVE-2026-69112no fix yetTransformers save_pretrained path traversal allows arbitrary file writes through chat template namesTransformersCVE-2026-9856fixed in 5.10.0Hugging Face Datasets folder-based builders allow path traversal through file_name metadatadatasetsCVE-2026-66007fixed in 5.0.1datasets: path traversaldatasetsCVE-2026-66007fixed in 5.0.1
Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacksGradioCVE-2026-49119fixed in 6.16.0Gradio: path traversalGradioCVE-2026-49119fixed in 6.16.0Gradio: Audio cache key ignores metadata when saving numpy audio outputsGradioCVE-2026-10783fixed in 6.15.1Transformers: code executionTransformersCVE-2026-5241fixed in 5.5.0Gradio contains a cookie injection vulnerabilityGradioCVE-2026-48545fixed in 6.15.0HuggingFace transformers vulnerable to remote code executionTransformersCVE-2026-4372fixed in 5.3.0Diffusers: TOCTOU Trust Remote Code BypassdiffusersCVE-2026-45804fixed in 0.38.0diffusers: remote code executiondiffusersCVE-2026-44827fixed in 0.38.0Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom componentsdiffusersCVE-2026-44513fixed in 0.38.0HuggingFace Transformers allows for arbitrary code execution in the `Trainer` classTransformersCVE-2026-1839fixed in 5.0.0rc3Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config ProcessingGradioCVE-2026-28416fixed in 6.6.0Gradio has an Open Redirect in its OAuth FlowGradioCVE-2026-28415fixed in 6.6.0Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+GradioCVE-2026-28414fixed in 6.7.0Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session SecretGradioCVE-2026-27167fixed in 6.6.0Hugging Face Text Generation Inference vulnerable to Uncontrolled Resource ConsumptionText Generation InferenceCVE-2026-0599fixed in 3.3.7Transformers: code injectionTransformersCVE-2025-14928no fix yetTransformers: unsafe deserializationTransformersCVE-2025-14929no fix yetTransformers: unsafe deserializationTransformersCVE-2025-14930no fix yetTransformers: unsafe deserializationTransformersCVE-2025-14920no fix yetTransformers: unsafe deserializationTransformersCVE-2025-14921no fix yetTransformers: unsafe deserializationTransformersCVE-2025-14924no fix yetTransformers: code injectionTransformersCVE-2025-14926no fix yetTransformers: code injectionTransformersCVE-2025-14927no fix yetTransformers: denial of serviceTransformersCVE-2025-6921fixed in 4.53.0Hugging Face Transformers library has Regular Expression Denial of ServiceTransformersCVE-2025-6051fixed in 4.53.0Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizerTransformersCVE-2025-6638fixed in 4.53.0Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerabilityTransformersCVE-2025-5197fixed in 4.53.0Transformers is vulnerable to ReDoS attack through its DonutProcessor classTransformersCVE-2025-3933fixed in 4.52.1Transformers vulnerable to ReDoS attack through its SETTING_RE variableTransformersCVE-2025-3262fixed in 4.51.0Transformers vulnerable to ReDoS attack through its get_imports() functionTransformersCVE-2025-3264fixed in 4.51.0Transformers's Improper Input Validation vulnerability can be exploited through username injectionTransformersCVE-2025-3777fixed in 4.52.1Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtrackingTransformersCVE-2025-3263fixed in 4.51.0Gradio Allows Unauthorized File Copy via Path ManipulationGradioCVE-2025-48889fixed in 5.31.0Gradio CORS Origin Validation Bypass VulnerabilityGradioCVE-2025-5320no fix yetHugging Face Transformers Regular Expression Denial of ServiceTransformersCVE-2025-2099fixed in 4.50.0Transformers Regular Expression Denial of Service (ReDoS) vulnerabilityTransformersCVE-2025-1194fixed in 4.50.0Gradio DOS in multipart boundry while uploading the fileGradioCVE-2024-8966no fix yetGradio Vulnerable to Open RedirectGradioCVE-2024-8021no fix yetTransformers Regular Expression Denial of Service (ReDoS) vulnerabilityTransformersCVE-2024-12720fixed in 4.48.0Gradio Path Traversal vulnerabilityGradioCVE-2024-12217no fix yetGradio Vulnerable to Denial of Service (DoS) via Crafted Zip BombGradioCVE-2024-10569no fix yetGradio Vulnerable to Arbitrary File DeletionGradioCVE-2024-10648no fix yetGradio Vulnerable to Denial of Service (DoS) via Crafted HTTP RequestGradioCVE-2024-10624no fix yetGradio Blocked Path ACL Bypass VulnerabilityGradioCVE-2025-23042fixed in 5.11.0Deserialization of Untrusted Data in Hugging Face TransformersTransformersCVE-2024-11394fixed in 4.48.0Deserialization of Untrusted Data in Hugging Face TransformersTransformersCVE-2024-11392fixed in 4.48.0Deserialization of Untrusted Data in Hugging Face TransformersTransformersCVE-2024-11393fixed in 4.48.0Gradio vulnerable to arbitrary file read with File and UploadButton componentsGradioCVE-2024-51751fixed in 5.5.0gradio Server Side Request Forgery vulnerabilityGradioCVE-2024-48052no fix yetGradio's dropdown component pre-process step does not limit the values to those in the dropdown listGradioGHSA-26jh-r8g2-6fprfixed in 5.0.0Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG filesGradioCVE-2024-47872fixed in 5.0.0Gradio uses insecure communication between the FRP client and serverGradioCVE-2024-47871fixed in 5.0.0Gradio has a race condition in update_root_in_config may redirect user trafficGradioCVE-2024-47870fixed in 5.0.0Gradio performs a non-constant-time comparison when comparing hashesGradioCVE-2024-47869fixed in 4.44.0Gradio has several components with post-process steps allow arbitrary file leaksGradioCVE-2024-47868fixed in 5.0.0The newest 60. Each project page has the full list.
About Hugging Face
Hugging Face, Inc., is an American company based in New York City that develops computation tools for building applications using machine learning. Hugging Face's Transformers library is built for natural language processing applications.
Elsewhere on Ibis: Acquisitions · Paydays · Releases · Repos · Trending