Vendor
huggingface
No huggingface CVE is in the CISA KEV catalogue.
Tracked since 9 Nov · latest article 9 Nov · RSS · API
0Open KEV deadlines
None open
0Added to KEV · 90 days
of 0 in the full CISA catalogue · all time
0High exploit odds · current
EPSS top 5%, not in KEV
1Articles · 7 days
usual rate
Exploited, by due date
No huggingface CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds huggingface CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a huggingface CVE to KEV.
Fix listed
1 of 1 CVE in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-57845 | 46.1 |
Coverage1 article · all time
The latest article naming huggingface, in the shared story grammar.
Developinglatest 11 hours ago1 article1 outlet
1 article from 1 outlet since 9 Nov. Still developing; the latest report was 11 hours ago.
- Mon 9 Nov, 05:00 UTC. SecurityOnline, first report. PoC exposes RCE flaw in widely used Hugging Face Datasets.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
Show all 1 articles as a listHide the list
- Mon 9 NovDay 01
- PoC exposes RCE flaw in widely used Hugging Face Datasets05:00 · SecurityOnline · First report
All CVEs in coverage1
Exploited first, then by EPSS
Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder
8.8High0.6% EPSS · 1 article