Learn
active
HuggingFace publishes security.txt responsible disclosure page
- Engineer — Learn: If your team uses HuggingFace for model hosting or inference, this is now the confirmed channel for reporting security issues; also a low-effort reminder to verify your own services expose a security.txt per RFC 9116.
- SOC/IR — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.