Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-7018

Fixed upstream EPSS <1%CVSS 9.6

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

Published 2023-12-20 · CVE record · OSV

Products: huggingface/transformers

Fixed upstream

EcosystemPackageFixed in
PyPItransformers4.36.0
PyPItransformers1d63b0ec361e7a38f1339385e8a5a855085532ce