Is huggingface-hub safe?
As of 2026-11-14, CyberXYZ has no known vulnerabilities or malicious-package signals recorded for huggingface-hub (pypi). That describes what is recorded, not a guarantee about future releases.
2,855 published models
21 declared · 98 observed · 2802 inferred
| Model | Evidence |
|---|---|
| bespokelabs/Bespoke-Nimble-9B | declared |
| c41/deepopen-banking77-sam13-v1 | declared |
2855 published AI models are associated with this package: 21 name it in a requirements or pyproject file, 98 load it or import it directly, and 2802 are inferred from the runtime stack their declared library pulls in. Only 18 state a version requirement, so this is not a count of affected models.
Is huggingface-hub safe to install?
As of 2026-11-14, CyberXYZ has no known vulnerabilities or malicious-package signals recorded for huggingface-hub (pypi). That is a statement about the record, not a guarantee, so check the exact version you install.
Does huggingface-hub have known vulnerabilities?
No known vulnerabilities are recorded for huggingface-hub (pypi) as of 2026-11-14.
How do I check huggingface-hub before installing?
Search huggingface-hub in CyberXYZ Check at https://cyberxyz.io/check?q=huggingface-hub. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 03:24 UTC. Updated continuously from NVD, GHSA, OSV and CNA feeds.