CVE-2023-6730: Huggingface Transformers

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

Affected products

• Huggingface Transformers: before 4.36.0 (fixed in 4.36.0)

Published 2023-12-19. Last modified 2026-06-17.