AdvisoriesToolsStatsChecklistSubmitGet the email
← All advisories
CVE-2023-6730criticalCode execution2023-12-19

CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0.

01.

What it is

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0.

02.

How to check

  1. Affected: transformers (pip) < 4.36.0.
  2. Compare your installed version with the range above (command below).
03.

How to fix

  1. Upgrade transformers to 4.36.0 or later.
pip show transformers | grep Version
04.

Sources

More advisories for this tool
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.