huggingface datasets
- CVE-2026-57845 Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder 0.5%
- CVE-2026-66007 Datasets Path Traversal via Unsanitized file_name Metadata 0.5%
- CVE-2026-65010 Datasets Symlink-following Arbitrary File Write via Extractor.extract() 0.2%