transformers vulnerabilities (TuxCare)
5 vulnerabilities.
-
transformersTuxCare Hugging Face Transformers library writes remote code to disk prior to consent check 7.8 High -
transformersTuxCare Path Traversal in huggingface/transformers 7.1 High -
transformersTuxCare Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers 8.0 High -
transformersTuxCare Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers 7.8 High -
transformersTuxCare Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers 6.5 Medium