PatchTheCVEhuggingface vulnerabilities
Recent CVEs affecting huggingface products. 1 tracked.
huggingface has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-07-24. Highest priority: CVE-2026-66007 (score 39/100).
- CVE-2026-66007 MEDIUM 6.5 UPGRADE Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based datas
FAQ
How do I fix huggingface vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is huggingface being exploited right now?
None of the tracked huggingface CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which huggingface CVE should I patch first?
CVE-2026-66007 currently ranks highest (39/100): Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based datas.