Last seen December 19, 2023

GitHub Security Vulnerability

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0.

Technical Severity

Low severity

Lifecycle Status

STABLE

Sources

1 source: osv.dev

What Happened

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0.

Why This Matters

Current evidence identifies a security issue involving GitHub, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Identify deployments of GitHub matching the evidenced affected versions: 4.36.0.

Follow this incident as it develops Material-change notifications are being prepared for BugSkan Pro.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response

Last Seen

Dec 19, 2023 21:00

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Affected versions: 4.36.0

Primary entities:

GitHubvulnerabilityDeserializationUntrusted Datahuggingface/transformers

Timeline

Incident first seen
Dec 19, 2023 21:00
BugSkan first recorded this incident.
transformers has a Deserialization of Untrusted Data vulnerability
Dec 19, 2023 21:00
OSV.dev · Research

Sources

transformers has a Deserialization of Untrusted Data vulnerability

OSV.dev · Dec 19, 2023 21:00

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0.

Open publisher source

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.