CompaniesHugging FaceMonthly reportsDecember 2025
Hugging Face in December 2025: incidents, uptime and changes
0incidents posted
0labelled major or critical
—free of major/critical (partial)
—free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 0 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
Incidents 0
Hugging Face posted no incidents in December 2025.
CVEs published
- CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14921 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14927 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14926 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14920 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14924 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14928 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14930 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14931 Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 10.0)
- CVE-2025-14922 Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
- CVE-2025-14925 Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)
Cite this
Hugging Face posted 0 status incidents in December 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Hugging Face in December 2025
- Vendor
- Hugging Face
- Date
- URL
- https://rewindex.com/company/hugging-face/2025/12