huggingface datasets vulnerabilities

3 published CVEs name huggingface datasets among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 0Not scored 0

Newest CVEs

CVE-2026-57845
Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder
huggingface · datasets
High8.7
CVE-2026-66007
Datasets Path Traversal via Unsanitized file_name Metadata
huggingface · datasets
Medium6.9
CVE-2026-65010
Datasets Symlink-following Arbitrary File Write via Extractor.extract()
huggingface · datasets
Medium4.4

Most common weaknesses