Hugging Face
Security incidents tagged Hugging Face. Newest first.
0 Hugging Face incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 875
- Longest quiet run: 875 days (Jun 1–Oct 23)
Show 1 older incident1 older incident
May 2024 1
HighHugging Face Spaces secrets accessed without authorizationNo fix needed
Hugging Face Spaces No fix needed
Hugging Face detected unauthorized access to its Spaces platform, specifically Spaces secrets, and suspected a subset had been read. It revoked affected HF tokens, emailed impacted users, removed org tokens, moved Spaces secrets to a KMS, and told users to rotate keys and switch to fine-grained tokens.
