COOEY // HUBcompliance · community · intelligence

FAIL › dossier

huggingface vendor

1
failure events
0
zero-days
1
RCEs
0
on KEV
1
critical
50
worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 1 events

DateEventSevFlagsShameSummary
2026-06-03 CVE-2026-5241 critical ⚡RCE 50 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remo