Vulnerabilities for transformers

First version without a known vulnerability: 5.5.0

Details

• GHSA-fgcw-684q-jj6r2026-06-03

  huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path

  Fixed in: 5.5.0

• GHSA-29pf-2h5f-8g722026-05-26

  HuggingFace transformers vulnerable to remote code execution

  Fixed in: 5.3.0

• GHSA-69w3-r845-38552026-04-07

  HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class

  Fixed in: 5.0.0rc3, 5.0.0

• PYSEC-2025-2182025-12-23

  Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• PYSEC-2025-2172025-12-23

  Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• PYSEC-2025-2162025-12-23

  Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.

• PYSEC-2025-2152025-12-23

  Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.

• PYSEC-2025-2142025-12-23

  Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint.

• PYSEC-2025-2132025-12-23

  Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• PYSEC-2025-2122025-12-23

  Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• PYSEC-2025-2112025-12-23

  Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

• GHSA-4w7r-h757-3r742025-09-23

  Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

  Fixed in: 4.53.0

• GHSA-rcv9-qm8p-9p6j2025-09-14

  Hugging Face Transformers library has Regular Expression Denial of Service

  Fixed in: 4.53.0

• GHSA-59p9-h35m-wg4g2025-09-12

  Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer

  Fixed in: 4.53.0

• GHSA-9356-575x-2w9m2025-08-06

  Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

  Fixed in: 4.53.0

• GHSA-37mw-44qp-f5jm2025-07-11

  Transformers is vulnerable to ReDoS attack through its DonutProcessor class

  Fixed in: 4.52.1

• GHSA-489j-g2vx-39wf2025-07-07

  Transformers vulnerable to ReDoS attack through its SETTING_RE variable

  Fixed in: 4.51.0

• GHSA-jjph-296x-mrcr2025-07-07

  Transformers vulnerable to ReDoS attack through its get_imports() function

  Fixed in: 4.51.0

• GHSA-phhr-52qp-3mj42025-07-07

  Transformers's Improper Input Validation vulnerability can be exploited through username injection

  Fixed in: 4.52.1

• GHSA-q2wp-rjmx-x6x92025-07-07

  Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking

  Fixed in: 4.51.0

• GHSA-qq3j-4f4f-95832025-05-19

  Hugging Face Transformers Regular Expression Denial of Service

  Fixed in: 4.50.0, 8cb522b4190bd556ce51be04942720650b1a3e57, 4.49.0

• GHSA-fpwr-67px-3qhx2025-04-29

  Transformers Regular Expression Denial of Service (ReDoS) vulnerability

  Fixed in: 4.50.0

• GHSA-6rvg-6v2m-4j462025-03-20

  Transformers Regular Expression Denial of Service (ReDoS) vulnerability

  Fixed in: 4.48.0

• GHSA-hxxf-235m-72v32024-11-23

  Deserialization of Untrusted Data in Hugging Face Transformers

  Fixed in: 4.48.0

• GHSA-qxrp-vhvm-j7652024-11-23

  Deserialization of Untrusted Data in Hugging Face Transformers

  Fixed in: 4.48.0

• GHSA-wrfc-pvp9-mr9g2024-11-23

  Deserialization of Untrusted Data in Hugging Face Transformers

  Fixed in: 4.48.0

• GHSA-37q5-v5qm-c9v82024-04-10

  Transformers Deserialization of Untrusted Data vulnerability

  Fixed in: 4.38.0

• GHSA-v68g-wm8c-6x7j2023-12-20

  transformers has a Deserialization of Untrusted Data vulnerability

  Fixed in: 4.36.0, 1d63b0ec361e7a38f1339385e8a5a855085532ce

• GHSA-3863-2447-669p2023-12-19

  transformers has a Deserialization of Untrusted Data vulnerability

  Fixed in: 4.36.0, 1d63b0ec361e7a38f1339385e8a5a855085532ce

• GHSA-282v-666c-3fvg2023-05-18

  transformers has Insecure Temporary File

  Fixed in: 4.30.0, 80ca92470938bbcc348e2d9cf4734c7c25cb1c43