{"action":"Upgrade transformers to 4.30.0 or later.","affected":[{"fixed":"4.30.0","introduced":"0"}],"component":"transformers","cve_ids":["CVE-2023-2800"],"ecosystem":"PyPI","epss":0.00285,"exploited":false,"fixed_versions":["4.30.0"],"ghsa_id":"GHSA-282v-666c-3fvg","id":"tcs_01M5KGKC00QTRSH2XJZ1C9MXKQ","modified_at":"2026-06-10T17:02:48.310585754Z","published_at":"2023-05-18T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-299","https://github.com/huggingface/transformers/commit/80ca92470938bbcc348e2d9cf4734c7c25cb1c43","https://huntr.dev/bounties/a3867b4e-6701-4418-8c20-3c6e7084a44a","https://github.com/advisories/GHSA-282v-666c-3fvg"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"PYSEC-2023-299","url":"https://osv.dev/vulnerability/PYSEC-2023-299"}],"summary":"Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0."}