TR
Product
Transformers
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 0Low 0
Watch
Add Transformers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11394 | 8.8 | Nov 22 | Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 026a173a64372e9602a16523b8fae9de4b0ff428 |
| CVE-2024-11393 | 8.8 | Nov 22 | Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 8820fe8b8c4b9da94cf1e4761876f85c562e0efe |
| CVE-2024-11392 | 8.8 | Nov 22 | Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 940fde8dafaecb8f17b588c5078291f1c1a420c8 |
| CVE-2026-80047 | 7.8 | Sep 1 | Hugging Face Transformers library writes remote code to disk prior to consent check Affected: 4.57.0 through 5.16.1 |
| CVE-2025-14930 | 7.8 | Dec 23 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 4.57.1 |
| CVE-2025-14928 | 7.8 | Dec 23 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability Affected: 4.57.0 |
| CVE-2025-14924 | 7.8 | Dec 23 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 95faabf0a6cd845f4c5548697e288a79e424b096 |
| CVE-2025-14920 | 7.8 | Dec 23 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 9c8bd3fc1befe54f3efb9f385561eef49f060a70 |
| CVE-2025-14926 | 7.8 | Dec 23 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability Affected: 4.57.0 |
| CVE-2025-14927 | 7.8 | Dec 23 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability Affected: 4.57.0 |
| CVE-2025-14921 | 7.8 | Dec 23 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 9c8bd3fc1befe54f3efb9f385561eef49f060a70 |
| CVE-2025-14929 | 7.8 | Dec 23 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: d1c6310d6a02481d48d81607cba7840be04580d1 |
Showing 12