Search for packages
| purl | pkg:pypi/smolagents@1.2.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.5 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-54fq-v6x8-244g
Aliases: CVE-2026-4963 |
Hugging Face Smolagents has an Injection issue A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function … | There are no reported fixed by versions. |
|
PYSEC-2026-543
Aliases: CVE-2025-14931 GHSA-q9r5-6hrr-9ph7 |
Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE Hugging Face smolagents Remote Python Executor Deserialization of … | There are no reported fixed by versions. |
|
PYSEC-2026-542
Aliases: CVE-2025-5120 GHSA-6v92-r5mx-h5fx |
smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing … |
Vulnerable |
|
PYSEC-2026-3066
Aliases: CVE-2026-4963 GHSA-54fq-v6x8-244g |
Hugging Face Smolagents has an Injection issue A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function … | There are no reported fixed by versions. |
|
PYSEC-2026-1930
Aliases: CVE-2025-11844 GHSA-8mf9-rmgw-33qc |
Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability … |
Vulnerable |
|
PYSEC-2026-3067
Aliases: CVE-2026-2654 GHSA-jxgv-6j54-wwc7 |
Hugging Face Smolagents has a Server-Side Request Forgery issue A weakness has been identified in huggingface smolagents 1.24.0. Impacted is … | There are no reported fixed by versions. |