Skip to content

huggingface smolagents

CVE-2026-4963 Medium 6.3 huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection 0.6%
CVE-2026-2654 Medium 6.3 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery 0.4%