Huggingface Finetrainers
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Huggingface Finetrainers.
By the Year
In 2026 there have been 1 vulnerability in Huggingface Finetrainers with an average score of 5.3 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 5.30 |
It may take a day or so for new Finetrainers vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Huggingface Finetrainers Security Vulnerabilities
HuggingFace finetrainers <0.3.0 Code Injection in resolve_component_cls
CVE-2026-124588
5.3 - Medium
- November 09, 2026
A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function resolve_component_cls of the file finetrainers/utils/model.py of the component Model Index Handler. Performing a manipulation of the argument Library results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Code Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Huggingface Finetrainers or by Huggingface? Click the Watch button to subscribe.
