HU
Product
huggingface/transformers
17
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 6Low 1
Watch
Add huggingface/transformers to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5241 | 9.6 | Jun 3 | Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers Affected: before 5.5.0 |
| CVE-2024-3568 | 9.6 | Apr 10 | Arbitrary Code Execution via Deserialization in huggingface/transformers Affected: before 4.38 |
| CVE-2026-4372 | 7.8 | May 24 | Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers Affected: before 5.3.0 |
| CVE-2026-1839 | 7.8 | Apr 7 | Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers Affected: before v5.0.0rc3 |
| CVE-2025-6921 | 7.5 | Sep 23 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.53.0 |
| CVE-2025-6638 | 7.5 | Sep 12 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.53.0 |
| CVE-2025-3262 | 7.5 | Jul 7 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.51.0 |
| CVE-2025-2099 | 7.5 | May 19 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.50.0 |
| CVE-2024-12720 | 7.5 | Mar 20 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.48.0 |
| CVE-2026-9856 | 7.1 | Aug 2 | Path Traversal in huggingface/transformers Affected: before 5.10.0 |
| CVE-2025-1194 | 6.5 | Apr 29 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.50.0 |
| CVE-2025-6051 | 5.3 | Sep 14 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.53.0 |
| CVE-2025-5197 | 5.3 | Aug 6 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.53.0 |
| CVE-2025-3933 | 5.3 | Jul 11 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.52.1 |
| CVE-2025-3264 | 5.3 | Jul 7 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.51.0 |
| CVE-2025-3263 | 5.3 | Jul 7 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers Affected: before 4.51.0 |
| CVE-2025-3777 | 3.5 | Jul 7 | Improper Input Validation in huggingface/transformers Affected: before 4.52.1 |
Showing 17