CVE-2023-2800

Name of the Vulnerable Software and Affected Versions huggingface/transformers versions prior to 4.30.0

Description The issue is related to an insecure temporary file in the GitHub repository huggingface/transformers. A fix is available and has been released as part of version 4.30.0.

Recommendations For versions prior to 4.30.0, update to version 4.30.0 to resolve the issue. As a temporary workaround, consider restricting access to temporary files created by the huggingface/transformers repository until the update is applied.