Advisories · Technology

huggingface datasets.

Every CVE that names huggingface datasets among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57845 CVE record

CVSS 8.7 High

Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder
- huggingface datasets
- Insecure deserialization
Not analysed yet 23 Oct 2026
CVE-2026-65010 CVE record

CVSS 4.4 Medium

Datasets Symlink-following Arbitrary File Write via Extractor.extract()
- huggingface datasets
- CWE-61
Not analysed yet 23 Jul 2026