Huggingface Datasets — known CVE vulnerabilities

Every CVE whose affected-product data names Huggingface Datasets, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-66007 — CVSS 6.5 (medium): Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the…