Issues

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  huggingface/hf_transfer#103 · Filter by author github-actions opened on Sep 15, 2026

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  huggingface/hf_transfer#101 · Filter by author github-actions opened on Aug 19, 2026

• Crate spin 0.9.8 is yanked

  huggingface/hf_transfer#100 · Filter by author github-actions opened on Jul 14, 2026

• RUSTSEC-2026-0176: Out-of-bounds read in nth / nth_back for PyList and PyTuple iterators

  huggingface/hf_transfer#98 · Filter by author github-actions opened on Jun 12, 2026

• RUSTSEC-2026-0177: Missing Sync bound on PyCFunction::new_closure closures

  huggingface/hf_transfer#99 · Filter by author github-actions opened on Jun 12, 2026

• RUSTSEC-2025-0023: Broadcast channel calls clone in parallel, but does not require Sync

  huggingface/hf_transfer#97 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2025-0134: rustls-pemfile is unmaintained

  huggingface/hf_transfer#95 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

  huggingface/hf_transfer#96 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2026-0049: CRLs not considered authoritative by Distribution Point due to faulty matching logic

  huggingface/hf_transfer#94 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2026-0104: Reachable panic in certificate revocation list parsing

  huggingface/hf_transfer#93 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2026-0098: Name constraints for URI names were incorrectly accepted

  huggingface/hf_transfer#92 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2025-0009: Some AES functions may panic when overflow checking is enabled.

  huggingface/hf_transfer#90 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2026-0099: Name constraints were accepted for certificates asserting a wildcard name

  huggingface/hf_transfer#91 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2025-0004: ssl::select_next_proto use after free

  huggingface/hf_transfer#88 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2025-0022: Use-After-Free in Md::fetch and Cipher::fetch

  huggingface/hf_transfer#89 · Filter by author github-actions opened on May 27, 2026

• RUSTSEC-2026-0007: Integer overflow in BytesMut::reserve

  huggingface/hf_transfer#87 · Filter by author github-actions opened on May 27, 2026

• The caculation of the range stop may be incorrect in the function download_async

  huggingface/hf_transfer#65 · Filter by author jstzwj opened on Mar 6, 2025
  1

• can't find crate for zerofrom_derive

  huggingface/hf_transfer#64 · Filter by author 20171130 opened on Mar 5, 2025
  1

• Consider disabling HF_HUB_ENABLE_HF_TRANSFER for better error handling

  huggingface/hf_transfer#63 · Filter by author FurkanGozukara opened on Feb 5, 2025
  30

• Set throttle limit?

  huggingface/hf_transfer#60 · Filter by author BramVanroy opened on Jan 27, 2025
  5

• Why is downloading extremely slow at the end of each shard?

  huggingface/hf_transfer#57 · Filter by author tongyx361 opened on Jan 20, 2025
  1

• Cargo.lock version=4 breaks backward compatibility with Rust < 1.78

  huggingface/hf_transfer#55 · Filter by author tiran opened on Jan 17, 2025

• hf_transfer not working from python library for upload

  huggingface/hf_transfer#48 · Filter by author bartowski1182 opened on Aug 15, 2024
  2

• More advanced pipelining for hf_transfer to increase download speed even further

  huggingface/hf_transfer#32 · Filter by author aikitoria opened on Mar 28, 2024
  7

• hf_transfer download sometimes hangs without failing or succeeding

  huggingface/hf_transfer#30 · Filter by author chamini2 opened on Mar 8, 2024
  38