Hugging-face-inc
5 CVEs tracked since 2025. Since Jul 2025, none of them reached CISA KEV.
Hugging-face-inc CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-07 | 5 | 0 |
Products
The products that kept showing up in Hugging-face-inc's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 10 most recently published vulnerabilities affecting Hugging-face-inc.
- CVE-2026-25874LeRobot Unsafe Deserialization Remote Code Execution via gRPC9.8
- CVE-2025-11844XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function5.4
- CVE-2025-6921Regular Expression Denial of Service (ReDoS) in huggingface/transformers7.5
- CVE-2025-6051Regular Expression Denial of Service (ReDoS) in huggingface/transformers5.3
- CVE-2025-3933Regular Expression Denial of Service (ReDoS) in huggingface/transformers5.3
- CVE-2025-3777Improper Input Validation in huggingface/transformers3.5
- CVE-2025-3264Regular Expression Denial of Service (ReDoS) in huggingface/transformers5.3
- CVE-2025-3263Regular Expression Denial of Service (ReDoS) in huggingface/transformers5.3
- CVE-2025-3262Regular Expression Denial of Service (ReDoS) in huggingface/transformers7.5
- CVE-2025-1194Regular Expression Denial of Service (ReDoS) in huggingface/transformers6.5
The record
- Peak rank
- #182 in Jul 2025
- Busiest month shown
- Jul 2025, 5 CVEs
- Months with a KEV entry
- 0 since Jul 2025
- Monthly snapshots
- 1 since 2025