CVE-2023-7018: Huggingface Transformers

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

Affected products

• Huggingface Transformers: before 4.36.0 (fixed in 4.36.0)

Published 2023-12-20. Last modified 2026-06-17.