Low
osv
·
PYSEC-2026-4174
Hugging Face Transformers downloads custom generation code before trust consent
Published Oct 1, 2026
CVSS 3.1
A vulnerability in Hugging Face Transformers (versions 4.49.0,
Affected AI Products
transformers