CVE-2026-54316
Named by 2 kept items in this workspace.
Search every workspace for CVE-2026-54316. It matches the name as written, so it can find other things that share it.
The items that name it 2
Side-channel vulnerability where Hugging Face's public download counter was used to leak an API key one character at a time.
Turned Hugging Face's public download counter into an exfiltration channel that leaked an API key one character at a time; exploitation required getting untrusted content into a Claude Code context.
All cves in this workspace.