Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

text-generation

2 known vulnerabilities (1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
0.7.0 (Mar 22, 2024): affected by 2 advisories
Newest unaffected release
Every release is affected by at least one advisory
Advisories
2 · 1 high, 1 medium
Weekly downloads
8,974
Dependents
22
Releases
13 since 0.1.0 (Mar 7, 2023)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

    Affected: fixed in 3.3.7.

    No fix released. The advisory names 3.3.7 as the fix, which the registry doesn't have yet. The latest release, 0.7.0, is still affected.

  • CVE-2024-3924Medium 4.4

    Code Injection in huggingface/text-generation-inference

    Affected: fixed in 2.0.0.

    No fix released. The advisory names 2.0.0 as the fix, which the registry doesn't have yet. The latest release, 0.7.0, is still affected.