📂 Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Partial results (24 findings) are displayed below due to a content size limitation in GitHub. To view information on the remaining findings, navigate to the Mend Application.
Findings
| Finding |
Severity |
🎯 CVSS |
Exploit Maturity |
EPSS |
Library |
Type |
Fixed in |
Remediation Available |
Reachability |
| CVE-2023-7018 |
🟣 Critical |
9.6 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.36.0 |
✅ |
 Unreachable |
| CVE-2023-6730 |
🟣 Critical |
9.0 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.36.0 |
✅ |
 Reachable |
| CVE-2024-11393 |
🔴 High |
8.8 |
Not Defined |
2.894% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.48.0,transformers - 4.48.0,transformers - 4.48.0 |
✅ |
Reachable |
| CVE-2024-11394 |
🔴 High |
8.8 |
Not Defined |
2.415% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.48.0,transformers - 4.48.0,transformers - 4.48.0 |
✅ |
Reachable |
| CVE-2026-5241 |
🔴 High |
8.0 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 5.5.0,transformers - 5.5.0,https://github.com/huggingface/transformers.git - v5.5.0 |
✅ |
Reachable |
| CVE-2025-14920 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2025-14921 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2025-14924 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2025-14926 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2025-14927 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2025-14928 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2025-14929 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2025-14930 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
N/A |
❌ |
Reachable |
| CVE-2026-4372 |
🔴 High |
7.8 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 5.3.0,transformers - 5.3.0,https://github.com/huggingface/transformers.git - v5.3.0 |
✅ |
Reachable |
| CVE-2024-11392 |
🔴 High |
7.5 |
Not Defined |
7.14% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.48.0,transformers - 4.48.0 |
✅ |
Reachable |
| CVE-2026-1839 |
🟠 Medium |
6.5 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
https://github.com/huggingface/transformers.git - v5.0.0rc3,transformers - 5.0.0rc3,transformers - 5.0.0rc3 |
✅ |
Reachable |
| CVE-2024-12720 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.48.0,transformers - 4.48.0,https://github.com/huggingface/transformers.git - v4.48.0 |
✅ |
Reachable |
| CVE-2025-2099 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.50.0,transformers - 4.50.0 |
✅ |
Reachable |
| CVE-2025-3262 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.51.0,transformers - 4.51.0,https://github.com/huggingface/transformers.git - v4.51.0 |
✅ |
Reachable |
| CVE-2025-3263 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.51.0,https://github.com/huggingface/transformers.git - v4.51.0,transformers - 4.51.0 |
✅ |
Reachable |
| CVE-2025-3264 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
https://github.com/huggingface/transformers.git - v4.51.0,transformers - 4.51.0,transformers - 4.51.0 |
✅ |
Reachable |
| CVE-2025-3933 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.52.1,transformers - 4.52.1,https://github.com/huggingface/transformers.git - v4.52.1 |
✅ |
Reachable |
| CVE-2025-5197 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.53.0,https://github.com/huggingface/transformers.git - v4.53.0,transformers - 4.53.0 |
✅ |
Reachable |
| CVE-2025-6051 |
🟠 Medium |
5.3 |
Not Defined |
< 1% |
transformers-4.30.2-py3-none-any.whl |
Direct |
transformers - 4.53.0,https://github.com/huggingface/transformers.git - v4.53.0,transformers - 4.53.0 |
✅ |
Reachable |
Details
🟣CVE-2023-7018
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Publish Date: Dec 20, 2023 04:13 PM
URL: CVE-2023-7018
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 9.6
Suggested Fix
Type: Upgrade version
Origin: https://www.cve.org/CVERecord?id=CVE-2023-7018
Release Date: Dec 20, 2023 04:13 PM
Fix Resolution : transformers - 4.36.0
🟣CVE-2023-6730
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/yoso (Vulnerable Component)
Vulnerability Details
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Publish Date: Dec 19, 2023 12:11 PM
URL: CVE-2023-6730
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 9.0
Suggested Fix
Type: Upgrade version
Origin: https://huntr.com/bounties/423611ee-7a2a-442a-babb-3ed2f8385c16/
Release Date: Dec 19, 2023 12:11 PM
Fix Resolution : transformers - 4.36.0
🔴CVE-2024-11393
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/yoso (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25191.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Nov 22, 2024 09:23 PM
URL: CVE-2024-11393
Threat Assessment
Exploit Maturity:Not Defined
EPSS:2.894%
Score: 8.8
Suggested Fix
Type: Upgrade version
Origin: https://redirect.github.com/huggingface/transformers/pull/35296
Release Date: Nov 22, 2024 09:23 PM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0,transformers - 4.48.0
🔴CVE-2024-11394
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/esm (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25012.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Nov 22, 2024 09:23 PM
URL: CVE-2024-11394
Threat Assessment
Exploit Maturity:Not Defined
EPSS:2.415%
Score: 8.8
Suggested Fix
Type: Upgrade version
Origin: https://redirect.github.com/huggingface/transformers/pull/35296
Release Date: Nov 22, 2024 09:23 PM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0,transformers - 4.48.0
🔴CVE-2026-5241
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/efficientnet (Vulnerable Component)
Vulnerability Details
A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the "trust_remote_code" parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using "AutoModel.from_pretrained()" with "trust_remote_code=False", the "LightGlueConfig" reads the "trust_remote_code" value from the untrusted "config.json" file and propagates it into nested "AutoConfig.from_pretrained()" calls. This results in the execution of attacker-provided Python modules, even when the victim explicitly disables remote code execution. The vulnerability poses a high risk for environments such as API inference servers, research notebooks, CI/CD pipelines, and model evaluation workers, potentially leading to credential theft, lateral movement, or persistence/backdoor deployment.
Publish Date: Jun 03, 2026 12:33 PM
URL: CVE-2026-5241
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 8.0
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@676559d
Release Date: Jun 03, 2026 12:33 PM
Fix Resolution : transformers - 5.5.0,transformers - 5.5.0,https://github.com/huggingface/transformers.git - v5.5.0
🔴CVE-2025-14920
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/efficientnet (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25423.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14920
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14921
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/mmbt (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25424.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14921
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14924
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/vision_text_dual_encoder (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27984.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14924
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14926
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/data (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.
The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28251.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14926
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14927
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/yoso (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.
The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user.
. Was ZDI-CAN-28252.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14927
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14928
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/distilbert (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.
The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28253.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14928
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14929
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/bert_generation (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28308.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14929
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14930
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/deberta_v2 (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of weights. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28309.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14930
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2026-4372
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/vision_text_dual_encoder (Vulnerable Component)
Vulnerability Details
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious "config.json" file containing the "_attn_implementation_internal" field set to an attacker-controlled HuggingFace Hub repository ID. When a victim loads this model using the standard "AutoModelForCausalLM.from_pretrained()" API, the library downloads and executes arbitrary Python code from the attacker's repository with the victim's full OS privileges. This issue arises due to unfiltered deserialization of configuration attributes, insufficient sanitization of internal fields, and unsandboxed execution of downloaded kernels. The vulnerability bypasses the "trust_remote_code" security mechanism, is invisible to the victim, and exploits the standard documented usage pattern, making it particularly severe. Users are advised to upgrade to version 5.3.0 or later to mitigate this issue.
Publish Date: May 24, 2026 01:40 PM
URL: CVE-2026-4372
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@a7f8e7f
Release Date: May 24, 2026 01:40 PM
Fix Resolution : transformers - 5.3.0,transformers - 5.3.0,https://github.com/huggingface/transformers.git - v5.3.0
🔴CVE-2024-11392
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/esm (Vulnerable Component)
Vulnerability Details
Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-24322.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Nov 22, 2024 09:23 PM
URL: CVE-2024-11392
Threat Assessment
Exploit Maturity:Not Defined
EPSS:7.14%
Score: 7.5
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2024-11392
Release Date: Nov 22, 2024 09:23 PM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0
🟠CVE-2026-1839
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/efficientnet (Vulnerable Component)
Vulnerability Details
A vulnerability in the HuggingFace Transformers library, specifically in the "Trainer" class, allows for arbitrary code execution. The "_load_rng_state()" method in "src/transformers/trainer.py" at line 3059 calls "torch.load()" without the "weights_only=True" parameter. This issue affects all versions of the library supporting "torch>=2.2" when used with PyTorch versions below 2.6, as the "safe_globals()" context manager provides no protection in these versions. An attacker can exploit this vulnerability by supplying a malicious checkpoint file, such as "rng_state.pth", which can execute arbitrary code when loaded. The issue is resolved in version v5.0.0rc3.
Publish Date: Apr 07, 2026 05:22 AM
URL: CVE-2026-1839
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 6.5
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@03c8082
Release Date: Apr 07, 2026 05:22 AM
Fix Resolution : https://github.com/huggingface/transformers.git - v5.0.0rc3,transformers - 5.0.0rc3,transformers - 5.0.0rc3
🟠CVE-2024-12720
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/data (Vulnerable Component)
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougat_fast.py. The vulnerability occurs in the post_process_single() function, where a regular expression processes specially crafted input. The issue stems from the regex exhibiting exponential time complexity under certain conditions, leading to excessive backtracking. This can result in significantly high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.46.3 (latest).
Publish Date: Mar 20, 2025 10:11 AM
URL: CVE-2024-12720
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2024-12720
Release Date: Mar 20, 2025 10:11 AM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0,https://github.com/huggingface/transformers.git - v4.48.0
🟠CVE-2025-2099
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/efficientnet (Vulnerable Component)
Vulnerability Details
A vulnerability in the "preprocess_string()" function of the "transformers.testing_utils" module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.
Publish Date: May 19, 2025 11:22 AM
URL: CVE-2025-2099
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: GHSA-qq3j-4f4f-9583
Release Date: May 19, 2025 11:22 AM
Fix Resolution : transformers - 4.50.0,transformers - 4.50.0
🟠CVE-2025-3262
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/mmbt (Vulnerable Component)
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the "SETTING_RE" variable within the "transformers/commands/chat.py" file. The regex contains repetition groups and non-optimized quantifiers, leading to exponential backtracking when processing 'almost matching' payloads. This can degrade application performance and potentially result in a denial-of-service (DoS) when handling specially crafted input strings. The issue is fixed in version 4.51.0.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 07, 2025 09:54 AM
URL: CVE-2025-3262
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: https://redirect.github.com/huggingface/transformers/pull/36964
Release Date: Jul 07, 2025 09:54 AM
Fix Resolution : transformers - 4.51.0,transformers - 4.51.0,https://github.com/huggingface/transformers.git - v4.51.0
🟠CVE-2025-3263
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/data (Vulnerable Component)
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the "get_configuration_file()" function within the "transformers.configuration_utils" module. The affected version is 4.49.0, and the issue is resolved in version 4.51.0. The vulnerability arises from the use of a regular expression pattern "config.(.*).json" that can be exploited to cause excessive CPU consumption through crafted input strings, leading to catastrophic backtracking. This can result in model serving disruption, resource exhaustion, and increased latency in applications using the library.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 07, 2025 09:54 AM
URL: CVE-2025-3263
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@0720e20
Release Date: Jul 07, 2025 09:54 AM
Fix Resolution : transformers - 4.51.0,https://github.com/huggingface/transformers.git - v4.51.0,transformers - 4.51.0
🟠CVE-2025-3264
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/vision_text_dual_encoder (Vulnerable Component)
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the "get_imports()" function within "dynamic_module_utils.py". This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular expression pattern "\stry\s:.?except.?:" used to filter out try/except blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 07, 2025 09:55 AM
URL: CVE-2025-3264
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@0720e20
Release Date: Jul 07, 2025 09:55 AM
Fix Resolution : https://github.com/huggingface/transformers.git - v4.51.0,transformers - 4.51.0,transformers - 4.51.0
🟠CVE-2025-3933
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/data (Vulnerable Component)
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's "token2json()" method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The issue arises from the regex pattern "<s_(.*?)>" which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting document processing tasks using the Donut model.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 11, 2025 09:22 AM
URL: CVE-2025-3933
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@ebbe9b1
Release Date: Jul 11, 2025 09:22 AM
Fix Resolution : transformers - 4.52.1,transformers - 4.52.1,https://github.com/huggingface/transformers.git - v4.52.1
🟠CVE-2025-5197
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/esm (Vulnerable Component)
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the "convert_tf_weight_name_to_pt_weight_name()" function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern "/[^/]___([^/])/" that can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. The vulnerability affects versions up to 4.51.3 and is fixed in version 4.53.0. This issue can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting model conversion processes between TensorFlow and PyTorch formats.
Publish Date: Aug 06, 2025 11:53 AM
URL: CVE-2025-5197
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: GHSA-9356-575x-2w9m
Release Date: Aug 06, 2025 11:53 AM
Fix Resolution : transformers - 4.53.0,https://github.com/huggingface/transformers.git - v4.53.0,transformers - 4.53.0
🟠CVE-2025-6051
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
- ❌ transformers-4.30.2-py3-none-any.whl (Vulnerable Library)
Reachability Analysis
This vulnerability is potentially reachable:
- stable-diffusion-webui/modules/sd_models.py (Application)
- transformers-4.30.2/transformers/__init__.py (Extension)
-> ❌ transformers-4.30.2/transformers/models/efficientnet (Vulnerable Component)
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the "normalize_numbers()" method of the "EnglishNormalizer" class. This vulnerability affects versions up to 4.52.4 and is fixed in version 4.53.0. The issue arises from the method's handling of numeric strings, which can be exploited using crafted input strings containing long sequences of digits, leading to excessive CPU consumption. This vulnerability impacts text-to-speech and number normalization tasks, potentially causing service disruption, resource exhaustion, and API vulnerabilities.
Publish Date: Sep 14, 2025 05:03 PM
URL: CVE-2025-6051
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@ba8eaba
Release Date: Sep 14, 2025 05:03 PM
Fix Resolution : transformers - 4.53.0,https://github.com/huggingface/transformers.git - v4.53.0,transformers - 4.53.0
📂 Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Findings
Details
🟣CVE-2023-7018
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
The vulnerable code is unreachable
Vulnerability Details
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Publish Date: Dec 20, 2023 04:13 PM
URL: CVE-2023-7018
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 9.6
Suggested Fix
Type: Upgrade version
Origin: https://www.cve.org/CVERecord?id=CVE-2023-7018
Release Date: Dec 20, 2023 04:13 PM
Fix Resolution : transformers - 4.36.0
🟣CVE-2023-6730
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Publish Date: Dec 19, 2023 12:11 PM
URL: CVE-2023-6730
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 9.0
Suggested Fix
Type: Upgrade version
Origin: https://huntr.com/bounties/423611ee-7a2a-442a-babb-3ed2f8385c16/
Release Date: Dec 19, 2023 12:11 PM
Fix Resolution : transformers - 4.36.0
🔴CVE-2024-11393
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25191.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Nov 22, 2024 09:23 PM
URL: CVE-2024-11393
Threat Assessment
Exploit Maturity:Not Defined
EPSS:2.894%
Score: 8.8
Suggested Fix
Type: Upgrade version
Origin: https://redirect.github.com/huggingface/transformers/pull/35296
Release Date: Nov 22, 2024 09:23 PM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0,transformers - 4.48.0
🔴CVE-2024-11394
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25012.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Nov 22, 2024 09:23 PM
URL: CVE-2024-11394
Threat Assessment
Exploit Maturity:Not Defined
EPSS:2.415%
Score: 8.8
Suggested Fix
Type: Upgrade version
Origin: https://redirect.github.com/huggingface/transformers/pull/35296
Release Date: Nov 22, 2024 09:23 PM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0,transformers - 4.48.0
🔴CVE-2026-5241
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the "trust_remote_code" parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using "AutoModel.from_pretrained()" with "trust_remote_code=False", the "LightGlueConfig" reads the "trust_remote_code" value from the untrusted "config.json" file and propagates it into nested "AutoConfig.from_pretrained()" calls. This results in the execution of attacker-provided Python modules, even when the victim explicitly disables remote code execution. The vulnerability poses a high risk for environments such as API inference servers, research notebooks, CI/CD pipelines, and model evaluation workers, potentially leading to credential theft, lateral movement, or persistence/backdoor deployment.
Publish Date: Jun 03, 2026 12:33 PM
URL: CVE-2026-5241
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 8.0
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@676559d
Release Date: Jun 03, 2026 12:33 PM
Fix Resolution : transformers - 5.5.0,transformers - 5.5.0,https://github.com/huggingface/transformers.git - v5.5.0
🔴CVE-2025-14920
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25423.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14920
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14921
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25424.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14921
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14924
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27984.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14924
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14926
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.
The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28251.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14926
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14927
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.
The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user.
. Was ZDI-CAN-28252.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14927
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14928
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.
The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-28253.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14928
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14929
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28308.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14929
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2025-14930
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of weights. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28309.
Publish Date: Dec 23, 2025 09:04 PM
URL: CVE-2025-14930
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin:
Release Date:
Fix Resolution :
🔴CVE-2026-4372
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious "config.json" file containing the "_attn_implementation_internal" field set to an attacker-controlled HuggingFace Hub repository ID. When a victim loads this model using the standard "AutoModelForCausalLM.from_pretrained()" API, the library downloads and executes arbitrary Python code from the attacker's repository with the victim's full OS privileges. This issue arises due to unfiltered deserialization of configuration attributes, insufficient sanitization of internal fields, and unsandboxed execution of downloaded kernels. The vulnerability bypasses the "trust_remote_code" security mechanism, is invisible to the victim, and exploits the standard documented usage pattern, making it particularly severe. Users are advised to upgrade to version 5.3.0 or later to mitigate this issue.
Publish Date: May 24, 2026 01:40 PM
URL: CVE-2026-4372
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 7.8
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@a7f8e7f
Release Date: May 24, 2026 01:40 PM
Fix Resolution : transformers - 5.3.0,transformers - 5.3.0,https://github.com/huggingface/transformers.git - v5.3.0
🔴CVE-2024-11392
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the handling of configuration files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-24322.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Nov 22, 2024 09:23 PM
URL: CVE-2024-11392
Threat Assessment
Exploit Maturity:Not Defined
EPSS:7.14%
Score: 7.5
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2024-11392
Release Date: Nov 22, 2024 09:23 PM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0
🟠CVE-2026-1839
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A vulnerability in the HuggingFace Transformers library, specifically in the "Trainer" class, allows for arbitrary code execution. The "_load_rng_state()" method in "src/transformers/trainer.py" at line 3059 calls "torch.load()" without the "weights_only=True" parameter. This issue affects all versions of the library supporting "torch>=2.2" when used with PyTorch versions below 2.6, as the "safe_globals()" context manager provides no protection in these versions. An attacker can exploit this vulnerability by supplying a malicious checkpoint file, such as "rng_state.pth", which can execute arbitrary code when loaded. The issue is resolved in version v5.0.0rc3.
Publish Date: Apr 07, 2026 05:22 AM
URL: CVE-2026-1839
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 6.5
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@03c8082
Release Date: Apr 07, 2026 05:22 AM
Fix Resolution : https://github.com/huggingface/transformers.git - v5.0.0rc3,transformers - 5.0.0rc3,transformers - 5.0.0rc3
🟠CVE-2024-12720
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougat_fast.py. The vulnerability occurs in the post_process_single() function, where a regular expression processes specially crafted input. The issue stems from the regex exhibiting exponential time complexity under certain conditions, leading to excessive backtracking. This can result in significantly high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.46.3 (latest).
Publish Date: Mar 20, 2025 10:11 AM
URL: CVE-2024-12720
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2024-12720
Release Date: Mar 20, 2025 10:11 AM
Fix Resolution : transformers - 4.48.0,transformers - 4.48.0,https://github.com/huggingface/transformers.git - v4.48.0
🟠CVE-2025-2099
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A vulnerability in the "preprocess_string()" function of the "transformers.testing_utils" module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.
Publish Date: May 19, 2025 11:22 AM
URL: CVE-2025-2099
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: GHSA-qq3j-4f4f-9583
Release Date: May 19, 2025 11:22 AM
Fix Resolution : transformers - 4.50.0,transformers - 4.50.0
🟠CVE-2025-3262
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the "SETTING_RE" variable within the "transformers/commands/chat.py" file. The regex contains repetition groups and non-optimized quantifiers, leading to exponential backtracking when processing 'almost matching' payloads. This can degrade application performance and potentially result in a denial-of-service (DoS) when handling specially crafted input strings. The issue is fixed in version 4.51.0.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 07, 2025 09:54 AM
URL: CVE-2025-3262
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: https://redirect.github.com/huggingface/transformers/pull/36964
Release Date: Jul 07, 2025 09:54 AM
Fix Resolution : transformers - 4.51.0,transformers - 4.51.0,https://github.com/huggingface/transformers.git - v4.51.0
🟠CVE-2025-3263
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the "get_configuration_file()" function within the "transformers.configuration_utils" module. The affected version is 4.49.0, and the issue is resolved in version 4.51.0. The vulnerability arises from the use of a regular expression pattern "config.(.*).json" that can be exploited to cause excessive CPU consumption through crafted input strings, leading to catastrophic backtracking. This can result in model serving disruption, resource exhaustion, and increased latency in applications using the library.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 07, 2025 09:54 AM
URL: CVE-2025-3263
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@0720e20
Release Date: Jul 07, 2025 09:54 AM
Fix Resolution : transformers - 4.51.0,https://github.com/huggingface/transformers.git - v4.51.0,transformers - 4.51.0
🟠CVE-2025-3264
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the "get_imports()" function within "dynamic_module_utils.py". This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular expression pattern "\stry\s:.?except.?:" used to filter out try/except blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 07, 2025 09:55 AM
URL: CVE-2025-3264
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@0720e20
Release Date: Jul 07, 2025 09:55 AM
Fix Resolution : https://github.com/huggingface/transformers.git - v4.51.0,transformers - 4.51.0,transformers - 4.51.0
🟠CVE-2025-3933
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's "token2json()" method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The issue arises from the regex pattern "<s_(.*?)>" which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting document processing tasks using the Donut model.
Mend Note: The description of this vulnerability differs from MITRE.
Publish Date: Jul 11, 2025 09:22 AM
URL: CVE-2025-3933
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@ebbe9b1
Release Date: Jul 11, 2025 09:22 AM
Fix Resolution : transformers - 4.52.1,transformers - 4.52.1,https://github.com/huggingface/transformers.git - v4.52.1
🟠CVE-2025-5197
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the "convert_tf_weight_name_to_pt_weight_name()" function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern "/[^/]___([^/])/" that can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. The vulnerability affects versions up to 4.51.3 and is fixed in version 4.53.0. This issue can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting model conversion processes between TensorFlow and PyTorch formats.
Publish Date: Aug 06, 2025 11:53 AM
URL: CVE-2025-5197
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: GHSA-9356-575x-2w9m
Release Date: Aug 06, 2025 11:53 AM
Fix Resolution : transformers - 4.53.0,https://github.com/huggingface/transformers.git - v4.53.0,transformers - 4.53.0
🟠CVE-2025-6051
Vulnerable Library - transformers-4.30.2-py3-none-any.whl
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Library home page: https://files.pythonhosted.org/packages/5b/0b/e45d26ccd28568013523e04f325432ea88a442b4e3020b757cf4361f0120/transformers-4.30.2-py3-none-any.whl
Path to dependency file: /requirements.txt
Path to vulnerable library: /tmp/ws-ua_20260720225829_XICAJU/python_DRWLIV/202607202258321/env/lib/python3.10/site-packages/transformers-4.30.2.dist-info
Dependency Hierarchy:
Reachability Analysis
This vulnerability is potentially reachable:
Vulnerability Details
A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the "normalize_numbers()" method of the "EnglishNormalizer" class. This vulnerability affects versions up to 4.52.4 and is fixed in version 4.53.0. The issue arises from the method's handling of numeric strings, which can be exploited using crafted input strings containing long sequences of digits, leading to excessive CPU consumption. This vulnerability impacts text-to-speech and number normalization tasks, potentially causing service disruption, resource exhaustion, and API vulnerabilities.
Publish Date: Sep 14, 2025 05:03 PM
URL: CVE-2025-6051
Threat Assessment
Exploit Maturity:Not Defined
EPSS:< 1%
Score: 5.3
Suggested Fix
Type: Upgrade version
Origin: huggingface/transformers@ba8eaba
Release Date: Sep 14, 2025 05:03 PM
Fix Resolution : transformers - 4.53.0,https://github.com/huggingface/transformers.git - v4.53.0,transformers - 4.53.0