Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Transformers

CVE-2023-2800: transformers has Insecure Temporary File

mediumCVSS 3.1 4.7GHSA-282v-666c-3fvg

Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0.

Published May 18, 2023 · Updated Nov 22, 2024

Affected packages

transformers

Ecosystem
PyPI
Affected
< 4.30.0
Fixed in
4.30.0
Check
pip show transformers

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0.

Credited to sfblackl-intel.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Transformers vulnerabilities

All Transformers entries