Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/smolagents@1.23.0
purl pkg:pypi/smolagents@1.23.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.5
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-54fq-v6x8-244g
Aliases:
CVE-2026-4963
Hugging Face Smolagents has an Injection issue A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function … There are no reported fixed by versions.
PYSEC-2026-543
Aliases:
CVE-2025-14931
GHSA-q9r5-6hrr-9ph7
Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE Hugging Face smolagents Remote Python Executor Deserialization of … There are no reported fixed by versions.
PYSEC-2026-3066
Aliases:
CVE-2026-4963
GHSA-54fq-v6x8-244g
Hugging Face Smolagents has an Injection issue A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function … There are no reported fixed by versions.
PYSEC-2026-3067
Aliases:
CVE-2026-2654
GHSA-jxgv-6j54-wwc7
Hugging Face Smolagents has a Server-Side Request Forgery issue A weakness has been identified in huggingface smolagents 1.24.0. Impacted is … There are no reported fixed by versions.
This package is not known to fix any advisories.