Hugging Face Publishes security.txt for Responsible Disclosure
First seen · 9/11/2026, 10:38 PMLatest activity · 9/11/2026, 10:38 PM
Hugging Face has formalized its RFC 9116-compliant security.txt endpoint, providing clear guidelines and direct contact channels for vulnerability reporting. As the platform increasingly serves as the backbone for open-weights models and pipeline scripts, standardizing reporting channels reflects the growing scrutiny on AI model supply chain security.
Event heat · last 24 hours
There are 8 persisted snapshots in the last 24 hours. Peak heat was 10.5 at 9/12, 11:00; latest heat is 10.5.