CVE-2023-2800

ADVISORY - github

Summary

Insecure Temporary File in GitHub repository huggingface/transformers 4.29.2 and prior. A fix is available at commit 80ca92470938bbcc348e2d9cf4734c7c25cb1c43 and has been released as part of version 4.30.0.

EPSS Score⁠: 0.00018 (0.030)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-377⁠

Insecure Temporary File

ADVISORY - github

CWE-377⁠

Insecure Temporary File

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-377⁠

Insecure Temporary File

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.