AI Safety
Transformers Writes Remote Code to Disk Before It Asks Consent
CERT/CC published VU#456290 on 1 September, four weeks after notifying Hugging Face. There is no vendor statement, no patch, and the ordering is unchanged in the current release — eight versions past the stated ceiling.
1h ago
