MEDIUM 4.7 PyPI
GHSA-282v-666c-3fvg · CVE-2023-2800, PYSEC-2023-299 transformers has Insecure Temporary File
Modified: 11/22/2024
package
PyPI / transformers
pkg:pypi/transformers
MEDIUM 5.3 PyPI
GHSA-37mw-44qp-f5jm · CVE-2025-3933 Transformers is vulnerable to ReDoS attack through its DonutProcessor class
Modified: 2/4/2026
LOW 3.4 PyPI
GHSA-37q5-v5qm-c9v8 · CVE-2024-3568 Transformers Deserialization of Untrusted Data vulnerability
Modified: 4/10/2024
CRITICAL 9.0 PyPI
GHSA-3863-2447-669p · CVE-2023-6730, PYSEC-2023-300 transformers has a Deserialization of Untrusted Data vulnerability
Modified: 11/22/2024
MEDIUM 5.3 PyPI
GHSA-489j-g2vx-39wf · CVE-2025-3262 Transformers vulnerable to ReDoS attack through its SETTING_RE variable
Modified: 8/4/2025
MEDIUM 5.3 PyPI
GHSA-4w7r-h757-3r74 · CVE-2025-6921 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
Modified: 2/4/2026
MEDIUM 5.3 PyPI
GHSA-59p9-h35m-wg4g · CVE-2025-6638 Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
Modified: 2/4/2026
MEDIUM 6.5 PyPI
GHSA-69w3-r845-3855 · CVE-2026-1839 HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
Modified: 4/17/2026
MEDIUM 5.3 PyPI
GHSA-6rvg-6v2m-4j46 · CVE-2024-12720 Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Modified: 2/4/2026
MEDIUM 5.3 PyPI
GHSA-9356-575x-2w9m · CVE-2025-5197 Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Modified: 2/4/2026
MEDIUM 4.3 PyPI
GHSA-fpwr-67px-3qhx · CVE-2025-1194 Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Modified: 2/4/2026
HIGH 8.8 PyPI
GHSA-hxxf-235m-72v3 · CVE-2024-11394, PYSEC-2024-229 Deserialization of Untrusted Data in Hugging Face Transformers
Modified: 2/4/2026
MEDIUM 5.3 PyPI
GHSA-jjph-296x-mrcr · CVE-2025-3264 Transformers vulnerable to ReDoS attack through its get_imports() function
Modified: 7/8/2025
LOW 3.5 PyPI
GHSA-phhr-52qp-3mj4 · CVE-2025-3777 Transformers's Improper Input Validation vulnerability can be exploited through username injection
Modified: 2/4/2026
MEDIUM 5.3 PyPI
GHSA-q2wp-rjmx-x6x9 · CVE-2025-3263 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
Modified: 7/8/2025
MEDIUM 5.3 PyPI
GHSA-qq3j-4f4f-9583 · CVE-2025-2099, PYSEC-2025-40 Hugging Face Transformers Regular Expression Denial of Service
Modified: 9/25/2025
HIGH 7.5 PyPI
GHSA-qxrp-vhvm-j765 · CVE-2024-11392, PYSEC-2024-227 Deserialization of Untrusted Data in Hugging Face Transformers
Modified: 2/4/2026
MEDIUM 5.3 PyPI
GHSA-rcv9-qm8p-9p6j · CVE-2025-6051 Hugging Face Transformers library has Regular Expression Denial of Service
Modified: 2/4/2026
HIGH 7.8 PyPI
GHSA-v68g-wm8c-6x7j · CVE-2023-7018, PYSEC-2023-301 transformers has a Deserialization of Untrusted Data vulnerability
Modified: 11/22/2024
HIGH 8.8 PyPI
GHSA-wrfc-pvp9-mr9g · CVE-2024-11393, PYSEC-2024-228 Deserialization of Untrusted Data in Hugging Face Transformers
Modified: 2/4/2026
MEDIUM 4.7 PyPI
PYSEC-2023-299 · CVE-2023-2800, GHSA-282v-666c-3fvg Modified: 6/10/2026
HIGH 8.8 PyPI
PYSEC-2023-300 · CVE-2023-6730, GHSA-3863-2447-669p Modified: 6/10/2026
HIGH 7.8 PyPI
PYSEC-2023-301 · CVE-2023-7018, GHSA-v68g-wm8c-6x7j Modified: 6/10/2026
HIGH 8.8 PyPI
PYSEC-2024-227 · CVE-2024-11392, GHSA-qxrp-vhvm-j765 Modified: 6/10/2026
HIGH 8.8 PyPI
PYSEC-2024-228 · CVE-2024-11393, GHSA-wrfc-pvp9-mr9g Modified: 6/10/2026
HIGH 8.8 PyPI
PYSEC-2024-229 · CVE-2024-11394, GHSA-hxxf-235m-72v3 Modified: 6/10/2026
HIGH 7.8 PyPI
PYSEC-2025-211 · CVE-2025-14920 Modified: 5/21/2026
HIGH 7.8 PyPI
PYSEC-2025-212 · CVE-2025-14921 Modified: 5/21/2026
HIGH 7.8 PyPI
PYSEC-2025-213 · CVE-2025-14924 Modified: 5/21/2026
HIGH 7.8 PyPI
PYSEC-2025-214 · CVE-2025-14926 Modified: 5/21/2026
HIGH 7.8 PyPI
PYSEC-2025-215 · CVE-2025-14927 Modified: 5/21/2026
HIGH 7.8 PyPI
PYSEC-2025-216 · CVE-2025-14928 Modified: 5/21/2026
HIGH 7.8 PyPI
PYSEC-2025-217 · CVE-2025-14929 Modified: 5/21/2026
HIGH 7.8 PyPI
PYSEC-2025-218 · CVE-2025-14930 Modified: 5/21/2026
HIGH 7.5 PyPI
PYSEC-2025-40 · CVE-2025-2099, GHSA-qq3j-4f4f-9583 Modified: 6/10/2026