CWE-1066— Missing Serialization Control Element

The product contains a serializable data element that does not have an associated serialization method.— MITRE CWE catalog

1 active CVE classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-1066page 1 of 1

CVE-2026-4372HIGHCVSS 7.8EG 7.8
2026-05-24
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config.json` file containing the `_attn_implem…

Map vulnerabilities like CWE-1066 to your infrastructure

EchelonGraph correlates every CVE — across CWE-1066 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →