Aller au contenu

Vulnérabilités de huggingface huggingface/transformers

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-9856 A vulnerability in huggingface/transformers… 7.1 Élevée 2 août 2026
CVE-2026-5241 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an… 8.0 Élevée 3 juin 2026
CVE-2026-4372 A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to… 7.8 Élevée 24 mai 2026
CVE-2026-1839 A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary… 6.5 Moyenne 7 avr. 2026
CVE-2025-6921 The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service… 5.3 Moyenne 23 sept. 2025
CVE-2025-6051 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,… 5.3 Moyenne 14 sept. 2025
CVE-2025-6638 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,… 5.3 Moyenne 12 sept. 2025
CVE-2025-5197 A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library,… 5.3 Moyenne 6 août 2025
CVE-2025-3933 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,… 5.3 Moyenne 11 juil. 2025
CVE-2025-3777 Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the… 3.5 Faible 7 juil. 2025
CVE-2025-3264 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,… 5.3 Moyenne 7 juil. 2025
CVE-2025-3263 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library,… 5.3 Moyenne 7 juil. 2025
CVE-2025-3262 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers… 5.3 Moyenne 7 juil. 2025
CVE-2025-2099 A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in… 5.3 Moyenne 19 mai 2025
CVE-2025-1194 A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library,… 4.3 Moyenne 29 avr. 2025
CVE-2024-12720 A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library,… 5.3 Moyenne 20 mars 2025
CVE-2024-3568 The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data… 3.4 Faible 10 avr. 2024
CVE-2023-7018 Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36 9.6 Critique 20 déc. 2023
CVE-2023-6730 Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36 9.0 Critique 19 déc. 2023
CVE-2023-2800 Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0 4.7 Moyenne 18 mai 2023

Autres produits huggingface