huggingface
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 39 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 18, 2023 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers
Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers
Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components
Diffusers: None.py Trust Remote Code Bypass
LeRobot Unsafe Deserialization Remote Code Execution via gRPC
Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers
huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
(0Day) Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
(0Day) Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability
Monitor huggingface in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.