{"action":"Upgrade transformers to 4.30.0 or later.","affected":[{"fixed":"4.30.0","introduced":"0"}],"component":"transformers","cve_ids":["CVE-2023-2800"],"ecosystem":"PyPI","epss":0.00285,"exploited":false,"fixed_versions":["4.30.0"],"ghsa_id":"GHSA-282v-666c-3fvg","id":"tcs_01M5KES6HAXZEJS35RJZHKFGF5","modified_at":"2024-11-22T20:46:31.605562Z","published_at":"2023-05-18T18:30:35Z","references":["https://osv.dev/vulnerability/GHSA-282v-666c-3fvg","https://nvd.nist.gov/vuln/detail/CVE-2023-2800","https://github.com/huggingface/transformers/pull/23372","https://github.com/huggingface/transformers/commit/80ca92470938bbcc348e2d9cf4734c7c25cb1c43","https://github.com/huggingface/transformers","https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2023-299.yaml","https://huntr.dev/bounties/a3867b4e-6701-4418-8c20-3c6e7084a44a"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-282v-666c-3fvg","url":"https://osv.dev/vulnerability/GHSA-282v-666c-3fvg"}],"summary":"transformers has Insecure Temporary File"}