TI-2025-01837 CVE-2025-2099 · GHSA-qq3j-4f4f-9583
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Priority HIGH 72
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack.