CWE-1066 · Other weaknesses
Missing Serialization Control Element
1CVEs
SortMost likely exploited
1 CVEs with CWE-1066 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-4372Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformershuggingface · huggingface/transformers · CVSS 7.8 · 2026-05-24 | 7.8 | 0.7% | 2026-05-24 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.