CVE-2023-2800mediumCWE-377

CVE-2023-2800: falha de média gravidade em huggingface/transformers

Insecure Temporary File in huggingface/transformers

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar huggingface/transformers+ Monitorar transformers

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.7epss 0.3%
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
huggingface · huggingface/transformers
CVEs relacionadas — huggingface/transformers

No mesmo produto, das mais perigosas para as menos.

CVE-2024-3568LOWArbitrary Code Execution via Deserialization in huggingface/transformersEPSS 2.1%CVE-2023-6730CRITICALDeserialization of Untrusted Data in huggingface/transformersEPSS 0.9%CVE-2024-12720MEDIUMRegular Expression Denial of Service (ReDoS) in huggingface/transformersEPSS 0.7%CVE-2023-7018CRITICALDeserialization of Untrusted Data in huggingface/transformersEPSS 0.7%CVE-2026-4372HIGHArbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformersEPSS 0.7%CVE-2025-2099MEDIUMRegular Expression Denial of Service (ReDoS) in huggingface/transformersEPSS 0.6%