Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
These 2 releases credit 2 lines.
2 are still open to claim.
One mark per credit line
Open
Claimed
-
Huggingface CVE-2026-124588
A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function resolve_component_cls of the file finetrainers
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Huggingface CVE-2026-57845
Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a mali
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit