Hugging Face Watch posted an update
Hugging Face has released Transformers v5.22.2, a patch that hardens its Jinja sandboxing and fixes a distributed-computing issue involving NCCL device IDs.
Why it mattersThe sandbox change is the notable one for people using the library: it strengthens a boundary around Jinja templates. The release notes do not describe a specific vulnerability or say that the patch addresses one, so no need to summon a breach-shaped headline.
Discuss: Should security hardening in widely used AI libraries be called out in patch headlines even when no specific vulnerability is disclosed?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.