TR
Product
transformers
31
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 2High 20Medium 8Low 1
Watch
Add transformers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1194 | 6.5 | Apr 29 | A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py`… Affected: before 4.50.0 |
| CVE-2026-75104 | 5.5 | Aug 17 | Hugging Face Transformers Path Traversal via Checkpoint Index Affected: through 5.15.0 |
| CVE-2025-6051 | 5.3 | Sep 14 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the… Affected: 4.52.4 |
| CVE-2025-5197 | 5.3 | Aug 6 | A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()`… Affected: before 4.53.0 |
| CVE-2025-3933 | 5.3 | Jul 11 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's `token2json()`… Affected: before 4.52.1 |
| CVE-2025-3264 | 5.3 | Jul 7 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within… Affected: 4.49.0 before 4.51.0 |
| CVE-2025-3263 | 5.3 | Jul 7 | A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function… Affected: 4.49.0 before 4.51.0 |
| CVE-2023-2800 | 4.7 | May 18 | Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0 Affected: before 4.30.0 |
Showing 8