Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1980
  • PyPI/transformers
 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1988
  • PyPI/transformers
 Hugging Face Transformers library has Regular Expression Denial of Service 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1981
  • PyPI/transformers
 Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1983
  • PyPI/transformers
 Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1977
  • PyPI/transformers
 Transformers is vulnerable to ReDoS attack through its DonutProcessor class 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1987
  • PyPI/transformers
 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1979
  • PyPI/transformers
 Transformers vulnerable to ReDoS attack through its SETTING_RE variable 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1986
  • PyPI/transformers
 Transformers's Improper Input Validation vulnerability can be exploited through username injection 07 Jul
  • Fix available
  • Severity - 3.5 (Low)
PYSEC-2026-1985
  • PyPI/transformers
 Transformers vulnerable to ReDoS attack through its get_imports() function 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1984
  • PyPI/transformers
 Transformers Regular Expression Denial of Service (ReDoS) vulnerability 07 Jul
  • Fix available
  • Severity - 4.3 (Medium)
PYSEC-2026-1982
  • PyPI/transformers
 Transformers Regular Expression Denial of Service (ReDoS) vulnerability 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1978
  • PyPI/transformers
 Transformers Deserialization of Untrusted Data vulnerability 07 Jul
  • Fix available
  • Severity - 3.4 (Low)
GHSA-fgcw-684q-jj6r
  • PyPI/transformers
 huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path 03 Jun
  • Fix available
  • Severity - 8.0 (High)
PYSEC-2026-2290
  • PyPI/transformers
 See record for full details 03 Jun
  • No fix available
  • Severity - 9.6 (Critical)
GHSA-29pf-2h5f-8g72
  • PyPI/transformers
 HuggingFace transformers vulnerable to remote code execution 26 May
  • Fix available
  • Severity - 7.8 (High)
PYSEC-2026-2289
  • PyPI/transformers
 See record for full details 24 May
  • Fix available
  • Severity - 7.8 (High)
Load more...(3 pages left)