CWE-1066 · 1 records
Missing Serialization Control Element
CVEs in this class
1 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2026-4372Proof of concept | Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformershuggingface · transformers · CWE-1066 | High7.8 | — | 0.6% | May 24, 2026 |
- CVE-2026-437231Monitor
Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers
HighCVSS 7.8Proof of conceptEPSS 0%huggingface · transformersMay 24, 2026