Product by Hugging Face
Hugging Face Datasets
3 known vulnerabilities in Hugging Face Datasets (Hugging Face), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-57845 | Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder | 8.8 | |
| Medium | CVE-2026-66007 | Datasets Path Traversal via Unsanitized file_name Metadata | 6.5 | |
| Medium | CVE-2026-65010 | Datasets Symlink-following Arbitrary File Write via Extractor.extract() | 6.6 |