Is dbdmg/wav2vec2-xls-r-300m-italian safe to load?
CyberXYZ rates dbdmg/wav2vec2-xls-r-300m-italian LOW, driven by pulls num2words unpinned; it had malicious releases that the registry no longer serves. It depends on 271 tracked packages, and 8 carry advisories, 1 historically exposed. It does not require trust_remote_code. A mixed serialization signal is recorded for it; the model_load_safety tool gives the per-file verdict.
LOW1 dependency(ies) install straight from a VCS URL (resolves to whatever HEAD is at install time).
3 more findings on this model.
- Author
- dbdmg
- Task
- automatic-speech-recognition
- Loader
- transformers
- License
- apache-2.0
- Downloads
- 191,282
- Remote code
- not required
40 direct, 19 with findings, 243 reachable, 1 historically exposed
| Package | Evidence | Advisories | Worst |
|---|---|---|---|
| num2wordshistorically exposed | direct, install | 1 | CRITICALpast releases |
| transformers | direct, install | 24 | none pinned |
Is dbdmg/wav2vec2-xls-r-300m-italian safe to load?
CyberXYZ does not call a model safe in absolute terms. It rates dbdmg/wav2vec2-xls-r-300m-italian LOW, driven by pulls num2words unpinned; it had malicious releases that the registry no longer serves. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.
What does dbdmg/wav2vec2-xls-r-300m-italian depend on?
CyberXYZ tracks 271 dependencies for dbdmg/wav2vec2-xls-r-300m-italian, 40 of them direct. 8 carry advisories, 1 historically exposed. They include num2words and transformers. A free account lists all of them.
Does dbdmg/wav2vec2-xls-r-300m-italian run code when it loads?
HuggingFace does not mark dbdmg/wav2vec2-xls-r-300m-italian as requiring trust_remote_code. That says nothing about the format of its weight files, which model_load_safety checks per file.
How do I check dbdmg/wav2vec2-xls-r-300m-italian before loading it?
Run the xyz MCP tool model_load_safety on dbdmg/wav2vec2-xls-r-300m-italian to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=dbdmg%2Fwav2vec2-xls-r-300m-italian.
Risk computed 2026-11-14 at 14:45 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.