CWE-1066: Missing Serialization Control Element
The product contains a serializable data element that does not have an associated serialization method.
1 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-4372 — Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers
Recently published
- CVE-2026-4372 — Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers