# Hugging Face in July 2026: incidents, uptime and changes

> Hugging Face in July 2026: 0 incidents on its status page (0 major or critical), 6 CVEs. From Rewindex’s archive of Hugging Face’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/hugging-face/2026/07
Last updated: 2026-10-24T21:10:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): — free of major/critical incidents, — free of any incident; outage time 0 min, incident time 0 min (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 6
- Previous month: [June 2026](https://rewindex.com/company/hugging-face/2026/06.md) · Next: [August 2026](https://rewindex.com/company/hugging-face/2026/08.md) · [All months](https://rewindex.com/company/hugging-face/reports.md) · [Hugging Face](https://rewindex.com/company/hugging-face.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2026-45804](https://rewindex.com/cve/CVE-2026-45804.md) Diffusers: TOCTOU Trust Remote Code Bypass (CVSS 7.5), published 2026-07-15
- [CVE-2026-63086](https://rewindex.com/cve/CVE-2026-63086.md) text-generation-inference 3.3.7 SSRF via fetch\_image in multimodal chat completions (CVSS 8.6), published 2026-07-16
- [CVE-2026-65920](https://rewindex.com/cve/CVE-2026-65920.md) Diffusers Path Traversal via weight\_map Arbitrary File Read (CVSS 4.3), published 2026-07-23
- [CVE-2026-65010](https://rewindex.com/cve/CVE-2026-65010.md) Datasets Symlink-following Arbitrary File Write via Extractor.extract() (CVSS 6.6), published 2026-07-23
- [CVE-2026-66007](https://rewindex.com/cve/CVE-2026-66007.md) Datasets Path Traversal via Unsanitized file\_name Metadata (CVSS 6.5), published 2026-07-24
- [CVE-2026-68770](https://rewindex.com/cve/CVE-2026-68770.md) sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust\_remote\_code=False (CVSS 9.8), published 2026-07-31

## Cite this

Hugging Face posted 0 status incidents in July 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/hugging-face/2026/07
- Citation: Hugging Face, “Hugging Face in July 2026” (2026-07-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/hugging-face/2026/07 (CC BY 4.0).
- Markdown link: `[Hugging Face: Hugging Face in July 2026 (2026-07-01)](https://rewindex.com/company/hugging-face/2026/07)`


---
Canonical: https://rewindex.com/company/hugging-face/2026/07 · Markdown: https://rewindex.com/company/hugging-face/2026/07.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T13:34:33.987Z