text-generation vulnerabilities
CVEs whose affected-version data names the text-generation package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-0599High· 7.5Hugging Face Text Generation Inference vulnerable to Uncontrolled Resource Consumption
Hugging Face Text Generation Inference vulnerable to Uncontrolled Resource Consumption
▾ Twilighttext-generation · text-generationEPSS 28%via OSV
CVE-2024-3924Medium· 4.4code injection vulnerability exists in the huggingface/text-generation-inference repository
code injection vulnerability exists in the huggingface/text-generation-inference repository
▾ Sunlittext-generation · text-generationEPSS 0.32%via OSV