VulnSea

smolagents vulnerabilities

CVEs whose affected-version data names the smolagents package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-4963Medium· 6.3
5mo ago

Hugging Face Smolagents has an Injection issue

Hugging Face Smolagents has an Injection issue

▾ Sunlitsmolagents · smolagentsEPSS 0.57%via OSV
CVE-2026-2654Medium· 6.3
7mo ago

Hugging Face Smolagents has a Server-Side Request Forgery issue

Hugging Face Smolagents has a Server-Side Request Forgery issue

▾ Sunlitsmolagents · smolagentsEPSS 0.39%via OSV
CVE-2025-11844Medium· 5.4PoC
11mo ago

Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function

Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function

▾ Twilightsmolagents · smolagentsEPSS 0.26%via OSV
smolagents vulnerabilities (CVEs) · VulnSea