All products

smolagents

PyPI · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Hugging Face Smolagents has an Injection issueCVE-2026-4963 · GHSA-54FQ-V6X8-244GVersion ranges need review. smolagents PyPI Low No fix reported
Hugging Face Smolagents has a Server-Side Request Forgery issueCVE-2026-2654 · GHSA-JXGV-6J54-WWC7Version ranges need review. smolagents PyPI Low No fix reported
Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f functionCVE-2025-11844 · GHSA-8MF9-RMGW-33QCVersion ranges need review. smolagents PyPI Medium Fix reported
smolagents has Sandbox Escape Vulnerability in the local_python_executor.py ModuleCVE-2025-5120 · GHSA-6V92-R5MX-H5FXVersion ranges need review. smolagents PyPI Critical Fix reported
Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCECVE-2025-14931 · GHSA-Q9R5-6HRR-9PH7Version ranges need review. smolagents PyPI Critical No fix reported