HU
Product
huggingface/transformers
4
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 0Low 0
Watch
Add huggingface/transformers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5241 | 9.6 | Jun 3 | Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers Affected: before 5.5.0 |
| CVE-2026-4372 | 7.8 | May 24 | Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers Affected: before 5.3.0 |
| CVE-2026-1839 | 7.8 | Apr 7 | Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers Affected: before v5.0.0rc3 |
| CVE-2026-9856 | 7.1 | Aug 2 | Path Traversal in huggingface/transformers Affected: before 5.10.0 |
Showing 4