Nixpkgs security tracker
6.8 MEDIUM
- CVSS version (CVSS): 4.0
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Attack Requirement (AT): None (N)
- Privileges Required (PR): None (N)
- User Interaction (UI): Passive (P)
- Vulnerable System Impact Confidentiality (VC): High (H)
- Vulnerable System Impact Integrity (VI): None (N)
- Vulnerable System Impact Availability (VA): None (N)
- Subsequent System Impact Confidentiality (SC): None (N)
- Subsequent System Impact Integrity (SI): None (N)
- Subsequent System Impact Availability (SA): None (N)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Attack Requirement (MAT): None (N)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Passive (P)
- Modified Vulnerable System Impact Confidentiality (MVC): High (H)
- Modified Vulnerable System Impact Integrity (MVI): None (N)
- Modified Vulnerable System Impact Availability (MVA): None (N)
- Modified Subsequent System Impact Confidentiality (MSC): Negligible (N)
- Modified Subsequent System Impact Integrity (MSI): Negligible (N)
- Modified Subsequent System Impact Availability (MSA): Negligible (N)
- Safety (S): Not Defined (X)
- Automatable (AU): Not Defined (X)
- Recovery (R): Not Defined (X)
- Value Density (V): Not Defined (X)
- Vulnerability Response Effort (RE): Not Defined (X)
- Provider Urgency (U): Not Defined (X)
- Confidentiality Req. (CR): Not Defined (X)
- Integrity Req. (IR): Not Defined (X)
- Availability Req. (AR): Not Defined (X)
- Exploit Maturity (E): Not Defined (X)
Activity log
- Created suggestion
Hugging Face Transformers Path Traversal via Checkpoint Index
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
References
-
GitHub Issue #47176 issue-tracking
-
GitHub Issue #47177 issue-tracking
-
get_checkpoint_shard_files in src/transformers/utils/hub.py technical-description
-
VulnCheck Advisory: Hugging Face Transformers Path Traversal via Checkpoint Index third-party-advisory
Affected products
- =<5.15.0
Matching in nixpkgs
pkgs.python313Packages.transformers
Natural Language Processing for TensorFlow 2.0 and PyTorch
pkgs.python314Packages.transformers
Natural Language Processing for TensorFlow 2.0 and PyTorch
pkgs.haskellPackages.has-transformers
This library 'Has' transformers
pkgs.haskellPackages.wai-transformers
None
pkgs.python313Packages.x-transformers
Concise but fully-featured transformer
pkgs.python314Packages.x-transformers
Concise but fully-featured transformer
pkgs.haskellPackages.transformers-base
Lift computations from the bottom of a transformer stack
pkgs.haskellPackages.transformers-abort
Error and short-circuit monad transformers
pkgs.haskellPackages.aivika-transformers
Transformers for the Aivika simulation library
pkgs.haskellPackages.transformers-compat
A small compatibility shim for the transformers library
pkgs.haskellPackages.transformers-either
An Either monad transformer
pkgs.haskellPackages.transformers-except
An Except monad transformer with
pkgs.haskellPackages.comonad-transformers
This package has been merged into comonad 4.0
pkgs.haskellPackages.indexed-transformers
Atkey indexed monad transformers
pkgs.python313Packages.spacy-transformers
spaCy pipelines for pretrained BERT, XLNet and GPT-2
pkgs.python314Packages.spacy-transformers
spaCy pipelines for pretrained BERT, XLNet and GPT-2
-
nixos-unstable -
- nixos-unstable-small 1.3.9
pkgs.pkgsRocm.python3Packages.transformers
Natural Language Processing for TensorFlow 2.0 and PyTorch
pkgs.haskellPackages.exception-transformers
Type classes and monads for unchecked extensible exceptions
pkgs.haskellPackages.predicate-transformers
A library for writing predicates and transformations over predicates in Haskell
pkgs.python313Packages.curated-transformers
PyTorch library of curated Transformer models and their composable components
pkgs.python314Packages.curated-transformers
PyTorch library of curated Transformer models and their composable components
pkgs.haskellPackages.writer-cps-transformers
WriteT and RWST monad transformers
pkgs.pkgsRocm.python3Packages.x-transformers
Concise but fully-featured transformer
pkgs.python313Packages.sentence-transformers
Multilingual Sentence & Image Embeddings with BERT
pkgs.python314Packages.sentence-transformers
Multilingual Sentence & Image Embeddings with BERT
pkgs.haskellPackages.data-accessor-transformers
Use Accessor to access state in transformers State monad
pkgs.pkgsRocm.python3Packages.spacy-transformers
spaCy pipelines for pretrained BERT, XLNet and GPT-2
pkgs.python313Packages.llm-sentence-transformers
LLM plugin for embeddings using sentence-transformers
pkgs.python314Packages.llm-sentence-transformers
LLM plugin for embeddings using sentence-transformers
pkgs.python313Packages.spacy-curated-transformers
spaCy entry points for Curated Transformers
pkgs.python314Packages.spacy-curated-transformers
spaCy entry points for Curated Transformers
-
nixos-unstable -
- nixos-unstable-small 2.1.2
pkgs.pkgsRocm.python3Packages.curated-transformers
PyTorch library of curated Transformer models and their composable components
pkgs.pkgsRocm.python3Packages.sentence-transformers
Multilingual Sentence & Image Embeddings with BERT
pkgs.pkgsRocm.python3Packages.llm-sentence-transformers
LLM plugin for embeddings using sentence-transformers
Package maintainers
-
@thielema Henning Thielemann <nix@henning-thielemann.de>
-
@turion Manuel Bärenz <programming@manuelbaerenz.de>
-
@danieldk Daniël de Kok <me@danieldk.eu>
-
@philiptaron Philip Taron <philip.taron@gmail.com>
-
@NickCao Nick Cao <nickcao@nichi.co>
-
@GaetanLepage Gaetan Lepage <gaetan@glepage.com>
-
@pashashocky Pash Shocky <pashashocky@gmail.com>
-
@happysalada Raphael Megzari <raphael@megzari.com>
-
@ByteSudoer ByteSudoer <bytesudoer@gmail.com>