# Vulnerability in Safetensors conversion space

**URL:** </static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Fvulnerability-in-safetensors-conversion-space%2F76509%3E%5C
**Category:** Research\
**Created:** [March 8, 2024, 9:48am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Fvulnerability-in-safetensors-conversion-space%2F76509 "2024-03-08T09:48:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rajasekar](https://avatars.discourse-cdn.com/v4/letter/r/edb3f5/32.png) [@rajasekar](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Frajasekar)%5C
**Post date:** [March 8, 2024, 9:48am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Fvulnerability-in-safetensors-conversion-space%2F76509%2F1 "2024-03-08T09:48:04Z")

</div>

Just came across an article highlighting a vulnerability in the Hugging Face Safetensors conversion service.

> **[Silent Sabotage | HiddenLayer Research](https://hiddenlayer.com/research/silent-sabotage/)**
>
> In this blog, we show how an attacker could compromise the Hugging Face Safetensors conversion space and its associated service bot.

It raises important questions about security in downloading and using models from huggingface, even in safetensors format. Curious to hear thoughts and ideas on, As an enterprise, how do we ensure the model files we download and use are secure amidst these vulnerabilities?