Vulnerability CVE-2023-7018
Published: 2023-12-20

Description:
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

Type:

CWE-502

 (Deserialization of Untrusted Data)

 References:
https://huntr.com/bounties/e1a3e548-e53a-48df-b708-9ee62140963c
https://github.com/huggingface/transformers/commit/1d63b0ec361e7a38f1339385e8a5a855085532ce
Copyright 2026, cxsecurity.com

 

Back to Top