TR
Product
Transformers
9
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 0Low 0
Watch
Add Transformers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-80047 | 7.8 | Sep 1 | Hugging Face Transformers library writes remote code to disk prior to consent check Affected: 4.57.0 through 5.16.1 |
| CVE-2025-14930 | 7.8 | Dec 23 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 4.57.1 |
| CVE-2025-14928 | 7.8 | Dec 23 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability Affected: 4.57.0 |
| CVE-2025-14924 | 7.8 | Dec 23 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 95faabf0a6cd845f4c5548697e288a79e424b096 |
| CVE-2025-14920 | 7.8 | Dec 23 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 9c8bd3fc1befe54f3efb9f385561eef49f060a70 |
| CVE-2025-14926 | 7.8 | Dec 23 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability Affected: 4.57.0 |
| CVE-2025-14927 | 7.8 | Dec 23 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability Affected: 4.57.0 |
| CVE-2025-14921 | 7.8 | Dec 23 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 9c8bd3fc1befe54f3efb9f385561eef49f060a70 |
| CVE-2025-14929 | 7.8 | Dec 23 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: d1c6310d6a02481d48d81607cba7840be04580d1 |
Showing 9