Threats tagged 'ghsa-9hc7-p88p-mwm8'

Hugging Face Datasets versions through 5.1.0 contain an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code. This occurs when a malicious pickle file is loaded via the deprecated pandas packaged builder, specifically through pandas.read_pickle() without validation. Exploitation requires a victim to load a crafted dataset using datasets.load_dataset("pandas", data_files=...), which triggers execution of the embedded payload with the victim process's privileges.