Huggingface Transformers vulnerabilities, page 2
31 vulnerabilities
Known vulnerabilities in Huggingface Transformers, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2025-3262huggingface · huggingface/transformers +2 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformersA Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the `SETTING_RE` variable within the `transformers/commands/chat.py` file. The regex contains repetition groups and non-optimized quantifiers, leading to exponential backtracking when processing 'almost matching' payloads. This can degrade application performance and potentially result in a denial-of-service (DoS) when handling specially crafted input strings. The issue is fixed in version 4.51.0.CVSS7.5HighEPSS0.49%RoutineCVE-2025-2099huggingface · huggingface/transformers +2 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformersA vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.CVSS7.5HighEPSS0.61%RoutineCVE-2025-1194huggingface · huggingface/transformers +2 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformersA Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.48.1 (latest).CVSS6.5MediumEPSS0.49%RoutineCVE-2024-12720huggingface · huggingface/transformers +2 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformersA Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougat_fast.py. The vulnerability occurs in the post_process_single() function, where a regular expression processes specially crafted input. The issue stems from the regex exhibiting exponential time complexity under certain conditions, leading to excessive backtracking. This can result in significantly high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.46.3 (latest).CVSS7.5HighEPSS0.75%RoutineCVE-2024-11394hugging face · transformers +3 moreHugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25012.CVSS8.8HighEPSS2.73%RoutineCVE-2024-11393hugging face · transformers +3 moreHugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25191.CVSS8.8HighEPSS3.27%PrioritiseCVE-2024-11392hugging face · transformers +3 moreHugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-24322.CVSS8.8HighEPSS7.72%RoutineCVE-2024-3568huggingface · huggingface/transformers +2 moreArbitrary Code Execution via Deserialization in huggingface/transformersThe huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.CVSS9.6CriticalEPSS2.08%PrioritiseCVE-2023-7018huggingface · huggingface/transformers +2 moreDeserialization of Untrusted Data in huggingface/transformersDeserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.CVSS9.6CriticalEPSS0.73%PrioritiseCVE-2023-6730huggingface · huggingface/transformers +2 moreDeserialization of Untrusted Data in huggingface/transformersDeserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.CVSS9.0CriticalEPSS0.93%RoutineCVE-2023-2800huggingface · huggingface/transformers +2 moreInsecure Temporary File in huggingface/transformersInsecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.CVSS4.7MediumEPSS0.29%