GitHub Security Incident
Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0.
What Happened
Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0.
Why This Matters
Current evidence identifies a security issue involving GitHub, but does not yet support a more specific impact claim.
Recommended Action
No confirmed vendor remediation is available in the current evidence. Confirm whether GitHub is present in your environment and review the affected configuration.
Exposure
Exposure unknown
May 19, 2023 00:00
Exposure reason: This incident does not currently match a technology in My Interests.
Exploitation status: UNKNOWN
Primary entities:
Timeline
-
Incident first seen
May 19, 2023 00:00BugSkan first recorded this incident.
-
transformers has Insecure Temporary File
May 19, 2023 00:00OSV.dev · Research
Sources
OSV.dev · May 19, 2023 00:00
Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0.
Open publisher sourceMy Interests Match
Create an account to see which incidents overlap with your interests.