Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4174
  • PyPI/transformers
 Hugging Face Transformers downloads custom generation code before trust consent 4 days ago
  • No fix available
  • Severity - 7.8 (High)
PYSEC-2026-4164
  • PyPI/sentence-transformers
 sentence-transformers local model loading bypasses trust_remote_code and executes custom Python 4 days ago
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2026-3929
  • PyPI/transformers
 Transformers save_pretrained path traversal allows arbitrary file writes through chat template names 10 Sep
  • Fix available
  • Severity - 7.1 (High)
GHSA-x9r9-c232-4q39
  • PyPI/transformers
 Hugging Face Transformers downloads custom generation code before trust consent 01 Sep
  • No fix available
  • Severity - 7.8 (High)
GHSA-xrqw-3rrv-vx5w
  • PyPI/transformers
 Transformers save_pretrained path traversal allows arbitrary file writes through chat template names 02 Aug
  • Fix available
  • Severity - 7.1 (High)
GHSA-jhr6-gm9c-rqjv
  • PyPI/sentence-transformers
 sentence-transformers local model loading bypasses trust_remote_code and executes custom Python 31 Jul
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2026-1980
  • PyPI/transformers
 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1988
  • PyPI/transformers
 Hugging Face Transformers library has Regular Expression Denial of Service 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1981
  • PyPI/transformers
 Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1983
  • PyPI/transformers
 Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1977
  • PyPI/transformers
 Transformers is vulnerable to ReDoS attack through its DonutProcessor class 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1987
  • PyPI/transformers
 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1979
  • PyPI/transformers
 Transformers vulnerable to ReDoS attack through its SETTING_RE variable 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1986
  • PyPI/transformers
 Transformers's Improper Input Validation vulnerability can be exploited through username injection 07 Jul
  • Fix available
  • Severity - 3.5 (Low)
PYSEC-2026-1985
  • PyPI/transformers
 Transformers vulnerable to ReDoS attack through its get_imports() function 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1984
  • PyPI/transformers
 Transformers Regular Expression Denial of Service (ReDoS) vulnerability 07 Jul
  • Fix available
  • Severity - 4.3 (Medium)
Load more...