Huggingface vulnerabilities, page 3
51 vulnerabilities
Known vulnerabilities in Huggingface products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 12 products.
RoutineCVE-2025-2099huggingface · huggingface/transformers +2 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformersA vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.CVSS7.5HighEPSS0.61%RoutineCVE-2025-1194huggingface · huggingface/transformers +2 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformersA Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.48.1 (latest).CVSS6.5MediumEPSS0.49%RoutineCVE-2024-12720huggingface · huggingface/transformers +2 moreRegular Expression Denial of Service (ReDoS) in huggingface/transformersA Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougat_fast.py. The vulnerability occurs in the post_process_single() function, where a regular expression processes specially crafted input. The issue stems from the regex exhibiting exponential time complexity under certain conditions, leading to excessive backtracking. This can result in significantly high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.46.3 (latest).CVSS7.5HighEPSS0.75%RoutineCVE-2024-11394hugging face · transformers +3 moreHugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25012.CVSS8.8HighEPSS2.73%RoutineCVE-2024-11393hugging face · transformers +3 moreHugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25191.CVSS8.8HighEPSS3.27%PrioritiseCVE-2024-11392hugging face · transformers +3 moreHugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-24322.CVSS8.8HighEPSS7.72%RoutineCVE-2024-3924huggingface · huggingface/text-generation-inference +1 moreCode Injection in huggingface/text-generation-inferenceA code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the `autodocs.yml` workflow file. The vulnerability arises from the insecure handling of the `github.head_ref` user input, which is used to dynamically construct a command for installing a software package. An attacker can exploit this by forking the repository, creating a branch with a malicious payload as the name, and then opening a pull request to the base repository. Successful exploitation could lead to arbitrary code execution within the context of the GitHub Actions runner. This issue affects versions up to and including v2.0.0 and was fixed in version 2.0.0.CVSS4.4MediumEPSS0.32%RoutineCVE-2024-3568huggingface · huggingface/transformers +2 moreArbitrary Code Execution via Deserialization in huggingface/transformersThe huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.CVSS9.6CriticalEPSS2.08%PrioritiseCVE-2023-7018huggingface · huggingface/transformers +2 moreDeserialization of Untrusted Data in huggingface/transformersDeserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.CVSS9.6CriticalEPSS0.73%PrioritiseCVE-2023-6730huggingface · huggingface/transformers +2 moreDeserialization of Untrusted Data in huggingface/transformersDeserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.CVSS9.0CriticalEPSS0.93%RoutineCVE-2023-2800huggingface · huggingface/transformers +2 moreInsecure Temporary File in huggingface/transformersInsecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.CVSS4.7MediumEPSS0.29%