Login Request a demo
HF
Vendor
Hugging Face
8 products with CVEs on record
17
CVEs
0
On KEV
2
New 30D
Products
LE
LeRobot
Hugging Face
9.8
2 CVEs0 on KEV1 new
TE
Text Embeddings Inference
Hugging Face
3.3
1 CVEs0 on KEV1 new
TR
Transformers
Hugging Face
7.8
9 CVEs0 on KEV0 new
AC
Accelerate
Hugging Face
7.8
1 CVEs0 on KEV0 new
DI
Diffusers
Hugging Face
7.8
1 CVEs0 on KEV0 new
PI
PyTorch Image Models
Hugging Face
7.8
1 CVEs0 on KEV0 new
SE
sentence-transformers
Hugging Face
9.8
1 CVEs0 on KEV0 new
SM
smolagents
Hugging Face
10.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115533
New
LE
LeRobot
Hugging Face
–
0%
Oct 26The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths
CVE-2026-108857
TE
Text Embeddings Inference
Hugging Face
3.3
0%
Oct 11Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging
CVE-2026-80047
TR
Transformers
Hugging Face
7.8
0%
Sep 1Hugging Face Transformers library writes remote code to disk prior to consent check
CVE-2026-15679
PI
PyTorch Image Models
Hugging Face
7.8
0%
Aug 20Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2026-68770
SE
sentence-transformers
Hugging Face
9.8
1%
Jul 31sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False
CVE-2026-25874
LE
LeRobot
Hugging Face
9.8
16%
Apr 23LeRobot Unsafe Deserialization Remote Code Execution via gRPC
CVE-2025-14925
AC
Accelerate
Hugging Face
7.8
0%
Dec 23Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-14922
DI
Diffusers
Hugging Face
7.8
0%
Dec 23Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-14931
SM
smolagents
Hugging Face
10.0
1%
Dec 23Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-14930
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-14928
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability
CVE-2025-14924
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-14920
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-14926
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability
CVE-2025-14927
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability
CVE-2025-14921
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
CVE-2025-14929
TR
Transformers
Hugging Face
7.8
0%
Dec 23Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability