VendorsHugging Facetransformersany version
Vulnerabilities

Hugging Face Transformers any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

19CVEs
CVE-2024-3568
Arbitrary Code Execution via Deserialization in huggingface/transformers
Published 2024-04-10 · Analyzed
9.6EPSS 0.021
CVE-2023-7018
Deserialization of Untrusted Data in huggingface/transformers
Published 2023-12-20 · Modified
9.6EPSS 0.007
CVE-2023-6730
Deserialization of Untrusted Data in huggingface/transformers
Published 2023-12-19 · Modified
9.0EPSS 0.009
CVE-2024-11392
Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability
Published 2024-11-22 · Analyzed
8.81 PoCEPSS 0.073
CVE-2024-11393
Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
Published 2024-11-22 · Analyzed
8.8EPSS 0.031
CVE-2024-11394
Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
Published 2024-11-22 · Analyzed
8.8EPSS 0.026
CVE-2026-4372
Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers
Published 2026-05-24 · Analyzed
7.8EPSS 0.006
CVE-2026-1839
Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers
Published 2026-04-07 · Analyzed
7.8EPSS 0.004
CVE-2024-12720
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-03-20 · Analyzed
7.5EPSS 0.007
CVE-2025-2099
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-05-19 · Analyzed
7.5EPSS 0.006
CVE-2025-6921
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-09-23 · Analyzed
7.5EPSS 0.005
CVE-2025-3262
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-07-07 · Analyzed
7.5EPSS 0.004
CVE-2025-1194
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-04-29 · Analyzed
6.5EPSS 0.005
CVE-2025-3263
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-07-07 · Analyzed
5.3EPSS 0.004
CVE-2025-3264
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-07-07 · Analyzed
5.3EPSS 0.004
CVE-2025-3933
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-07-11 · Analyzed
5.3EPSS 0.004
CVE-2025-5197
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Published 2025-08-06 · Analyzed
5.3EPSS 0.004
CVE-2023-2800
Insecure Temporary File in huggingface/transformers
Published 2023-05-18 · Modified
4.7EPSS 0.003
CVE-2025-3777
Improper Input Validation in huggingface/transformers
Published 2025-07-07 · Analyzed
3.5EPSS 0.004