Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: huggingface/transformers 4.51.0 Clear all filters
TI-2025-02860 CVE-2025-3264 · GHSA-jjph-296x-mrcr

Regular Expression Denial of Service (ReDoS) in huggingface/transformers

Priority MEDIUM 63

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00496 Published 2025-07-07 Fixed in 4.51.0 CWE-1333
TI-2025-02859 CVE-2025-3263 · GHSA-q2wp-rjmx-x6x9

Regular Expression Denial of Service (ReDoS) in huggingface/transformers

Priority MEDIUM 63

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuration_utils`…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00496 Published 2025-07-07 Fixed in 4.51.0 CWE-1333