| CVE-2026-9856 |
A vulnerability in huggingface/transformers…
|
7.1
High
|
Aug 2, 2026 |
| CVE-2026-5241 |
A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an…
|
8.0
High
|
Jun 3, 2026 |
| CVE-2026-4372 |
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to…
|
7.8
High
|
May 24, 2026 |
| CVE-2026-1839 |
A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary…
|
6.5
Medium
|
Apr 7, 2026 |
| CVE-2025-6921 |
The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service…
|
5.3
Medium
|
Sep 23, 2025 |
| CVE-2025-6051 |
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,…
|
5.3
Medium
|
Sep 14, 2025 |
| CVE-2025-6638 |
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,…
|
5.3
Medium
|
Sep 12, 2025 |
| CVE-2025-5197 |
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library,…
|
5.3
Medium
|
Aug 6, 2025 |
| CVE-2025-3933 |
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,…
|
5.3
Medium
|
Jul 11, 2025 |
| CVE-2025-3777 |
Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the…
|
3.5
Low
|
Jul 7, 2025 |
| CVE-2025-3264 |
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,…
|
5.3
Medium
|
Jul 7, 2025 |
| CVE-2025-3263 |
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,…
|
5.3
Medium
|
Jul 7, 2025 |
| CVE-2025-3262 |
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers…
|
5.3
Medium
|
Jul 7, 2025 |
| CVE-2025-2099 |
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in…
|
5.3
Medium
|
May 19, 2025 |
| CVE-2025-1194 |
A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library,…
|
4.3
Medium
|
Apr 29, 2025 |
| CVE-2024-12720 |
A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library,…
|
5.3
Medium
|
Mar 20, 2025 |
| CVE-2024-3568 |
The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data…
|
3.4
Low
|
Apr 10, 2024 |
| CVE-2023-7018 |
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36
|
9.6
Critical
|
Dec 20, 2023 |
| CVE-2023-6730 |
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36
|
9.0
Critical
|
Dec 19, 2023 |
| CVE-2023-2800 |
Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0
|
4.7
Medium
|
May 18, 2023 |