huggingface huggingface/transformers
20 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-9856 | unspecified – < 5.10.0 | Path Traversal in huggingface/transformers | HIGH 7.1 | 0.5 % | ||
| CVE-2026-5241 | unspecified – < 5.5.0 | Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers | CRITICAL 9.6 | 0.6 % | ||
| CVE-2026-4372 | unspecified – < 5.3.0 | Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers | HIGH 7.8 | 0.7 % | ||
| CVE-2026-1839 | unspecified – < v5.0.0rc3 | Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers | HIGH 7.8 | 0.4 % | ||
| CVE-2025-6921 | unspecified – < 4.53.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | HIGH 7.5 | 0.5 % | ||
| CVE-2025-6051 | unspecified – < 4.53.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-6638 | unspecified – < 4.53.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | HIGH 7.5 | 0.6 % | ||
| CVE-2025-5197 | unspecified – < 4.53.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-3933 | unspecified – < 4.52.1 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-3777 | unspecified – < 4.52.1 | Improper Input Validation in huggingface/transformers | LOW 3.5 | 0.4 % | ||
| CVE-2025-3264 | unspecified – < 4.51.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-3263 | unspecified – < 4.51.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-3262 | unspecified – < 4.51.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | HIGH 7.5 | 0.5 % | ||
| CVE-2025-2099 | unspecified – < 4.50.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | HIGH 7.5 | 0.6 % | ||
| CVE-2025-1194 | unspecified – < 4.50.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-12720 | unspecified – < 4.48.0 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | HIGH 7.5 | 0.7 % | ||
| CVE-2024-3568 | unspecified – < 4.38 | Arbitrary Code Execution via Deserialization in huggingface/transformers | CRITICAL 9.6 | 2.1 % | ||
| CVE-2023-7018 | unspecified – < 4.36 | Deserialization of Untrusted Data in huggingface/transformers | CRITICAL 9.6 | 0.7 % | ||
| CVE-2023-6730 | unspecified – < 4.36 | Deserialization of Untrusted Data in huggingface/transformers | CRITICAL 9.0 | 0.9 % | ||
| CVE-2023-2800 | unspecified – < 4.30.0 | Insecure Temporary File in huggingface/transformers | MEDIUM 4.7 | 0.3 % |