İçeriğe atla
Noroxi

huggingface kayıtları

huggingface üreticisine ait 40 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
10
Düzeltme kaydı olan
%72,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

40 kayıt
  • CVE-2025-5120
    47Planlayın

    Sandbox Escape Vulnerability in huggingface/smolagents

    KritikCVSS 10,0İstismar yokEPSS %25

    huggingface · smolagents27 Tem 2025

  • CVE-2024-3568
    39İzleyin

    Arbitrary Code Execution via Deserialization in huggingface/transformers

    KritikCVSS 9,6Kavram kanıtıEPSS %2

    huggingface · transformers10 Nis 2024

  • CVE-2026-5241
    38İzleyin

    Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

    KritikCVSS 9,6İstismar yokEPSS %1

    huggingface · transformers3 Haz 2026

  • CVE-2024-11392
    37İzleyin

    Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %7

    huggingface · transformers22 Kas 2024

  • CVE-2026-25874
    37İzleyin

    LeRobot Unsafe Deserialization Remote Code Execution via gRPC

    KritikCVSS 9,3İstismar yokEPSS %1

    huggingface · lerobot23 Nis 2026

  • CVE-2024-11393
    36İzleyin

    Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    huggingface · transformers22 Kas 2024

  • CVE-2024-11394
    36İzleyin

    Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %3

    huggingface · transformers22 Kas 2024

  • CVE-2023-6730
    35İzleyin

    Deserialization of Untrusted Data in huggingface/transformers

    YüksekCVSS 8,8İstismar yokEPSS %1

    huggingface · transformers19 Ara 2023

  • CVE-2026-44513
    35İzleyin

    Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

    YüksekCVSS 8,8İstismar yokEPSS %1

    huggingface · diffusers14 May 2026

  • CVE-2026-44827
    35İzleyin

    Diffusers: None.py Trust Remote Code Bypass

    YüksekCVSS 8,8İstismar yokEPSS %1

    huggingface · diffusers14 May 2026

  • CVE-2023-7018
    31İzleyin

    Deserialization of Untrusted Data in huggingface/transformers

    YüksekCVSS 7,8İstismar yokEPSS %1

    huggingface · transformers20 Ara 2023

  • CVE-2026-4372
    31İzleyin

    Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

    YüksekCVSS 7,8İstismar yokEPSS %1

    huggingface · transformers24 May 2026

  • CVE-2026-1839
    31İzleyin

    Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers7 Nis 2026

  • CVE-2025-14929
    31İzleyin

    Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2025-14920
    31İzleyin

    Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2025-14926
    31İzleyin

    Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2025-14927
    31İzleyin

    Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2025-14928
    31İzleyin

    Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2025-14921
    31İzleyin

    Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2025-14924
    31İzleyin

    Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2025-14930
    31İzleyin

    Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    huggingface · transformers23 Ara 2025

  • CVE-2024-12720
    30İzleyin

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    YüksekCVSS 7,5İstismar yokEPSS %1

    huggingface · transformers20 Mar 2025

  • CVE-2025-2099
    30İzleyin

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    YüksekCVSS 7,5İstismar yokEPSS %1

    huggingface · transformers19 May 2025

  • CVE-2025-6638
    30İzleyin

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    YüksekCVSS 7,5İstismar yokEPSS %1

    huggingface · transformers12 Eyl 2025

  • CVE-2025-6921
    30İzleyin

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    YüksekCVSS 7,5İstismar yokEPSS %1

    huggingface · transformers23 Eyl 2025