Low
osv
·
GHSA-x9r9-c232-4q39
Hugging Face Transformers downloads custom generation code before trust consent
Published Sep 1, 2026
CVSS 3.1
A vulnerability in Hugging Face Transformers (versions 4.49.0,
Affected AI Products
transformers