PyPI/text-generation CVE-2026-0599: high 7.5, EPSS 29.88%
Hugging Face Text Generation Inference vulnerable to Uncontrolled Resource Consumption
Action: Upgrade text-generation to 3.3.7 or later.
pip install text-generation==3.3.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.7 | - |
Fixed versions
| 3.3.7 |
Sources
- osv: GHSA-j7x9-7j54-2v3h
- https://nvd.nist.gov/vuln/detail/CVE-2026-0599
- https://github.com/huggingface/text-generation-inference/commit/24ee40d143d8d046039f12f76940a85886cbe152
- https://github.com/huggingface/text-generation-inference
- https://huntr.com/bounties/1d3f2085-666c-4441-b265-22f6f7d8d9cd
CVE-2026-0599 · published · modified · JSON