Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

transformers

32 known vulnerabilities (2 critical, 15 high, 13 medium, 2 low), with the versions each affects and the releases that fix them.

Latest release
5.22.2 (Nov 6, 2026): no advisory with comparable ranges affects it; 1 advisory (CVE-2025-2099) can't be checked against versions
Newest unaffected release
5.22.2 (Nov 6, 2026), the latest release, not counting 1 advisory without comparable ranges
Advisories
32 · 2 critical, 15 high, 13 medium, 2 low
Weekly downloads
27.8M
Dependents
9,838
Releases
252 since 0.1.0 (Aug 17, 2016)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Show all 32 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 32

  • Hugging Face Transformers library writes remote code to disk prior to consent check

    Affected: from 4.49.0, through 5.8.1.

    Fixed in 5.9.0 (released May 20, 2026, 104 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Path Traversal in huggingface/transformers

    Affected: fixed in 5.10.0.

    Fixed in 5.10.0 (released Jun 3, 2026, 60 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

    Affected: fixed in 5.5.0; through 5.2.0.

    Fixed in 5.5.0 (released Apr 2, 2026, 62 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

    Affected: fixed in 5.3.0.

    Fixed in 5.3.0 (released Mar 4, 2026, 81 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2026-1839Medium 6.5

    Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers

    Affected: fixed in 5.0.0; fixed in 5.0.0rc3.

    Fixed in 5.0.0 (released Jan 26, 2026, 71 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: through 4.57.1.

    Fixed in 4.57.2 (released Nov 24, 2025, 29 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

    Affected: through 4.57.0.

    Fixed in 4.57.1 (released Oct 14, 2025, 70 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: through 4.55.0.

    Fixed in 4.55.1 (released Aug 13, 2025, 132 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: through 4.54.1.

    Fixed in 4.55.0 (released Aug 5, 2025, 140 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

    Affected: through 4.57.0.

    Fixed in 4.57.1 (released Oct 14, 2025, 70 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

    Affected: through 4.57.0.

    Fixed in 4.57.1 (released Oct 14, 2025, 70 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: through 4.54.1.

    Fixed in 4.55.0 (released Aug 5, 2025, 140 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: through 5.0.0-rc0.

    Fixed in 5.0.0 (released Jan 26, 2026, 34 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-6921Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.53.0.

    Fixed in 4.53.0 (released Jun 26, 2025, 89 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-6051Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.53.0.

    Fixed in 4.53.0 (released Jun 26, 2025, 80 days before disclosure).

    The latest release, 5.22.2, is not affected.

Show all 32 advisoriesShow fewer advisories
  • CVE-2025-6638Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.53.0.

    Fixed in 4.53.0 (released Jun 26, 2025, 78 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-5197Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.53.0.

    Fixed in 4.53.0 (released Jun 26, 2025, 41 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-3933Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.52.1.

    Fixed in 4.52.1 (released May 20, 2025, 52 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • Improper Input Validation in huggingface/transformers

    Affected: fixed in 4.52.1.

    Fixed in 4.52.1 (released May 20, 2025, 48 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-3264Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.51.0.

    Fixed in 4.51.0 (released Apr 5, 2025, 93 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-3263Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.51.0.

    Fixed in 4.51.0 (released Apr 5, 2025, 93 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-3262Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: from 4.49.0, fixed in 4.51.0.

    Fixed in 4.51.0 (released Apr 5, 2025, 93 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2025-2099Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.50.0; fixed in 4.49.0.

  • CVE-2025-1194Medium 4.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.50.0.

    Fixed in 4.50.0 (released Mar 21, 2025, 39 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2024-12720Medium 5.3

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Affected: fixed in 4.48.0.

    Fixed in 4.48.0 (released Jan 10, 2025, 69 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: fixed in 4.48.0.

    Fixed in 4.48.0 (released Jan 10, 2025, 49 days after disclosure).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: fixed in 4.48.0.

    Fixed in 4.48.0 (released Jan 10, 2025, 49 days after disclosure).

    The latest release, 5.22.2, is not affected.

  • Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: fixed in 4.48.0.

    Fixed in 4.48.0 (released Jan 10, 2025, 49 days after disclosure).

    The latest release, 5.22.2, is not affected.

  • Arbitrary Code Execution via Deserialization in huggingface/transformers

    Affected: fixed in 4.38.0.

    Fixed in 4.38.0 (released Feb 21, 2024, 49 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2023-7018Critical 9.6

    Deserialization of Untrusted Data in huggingface/transformers

    Affected: fixed in 4.36.0; fixed in 4.36.0.

    Fixed in 4.36.0 (released Dec 11, 2023, 9 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2023-6730Critical 9.0

    Deserialization of Untrusted Data in huggingface/transformers

    Affected: fixed in 4.36.0; fixed in 4.36.0.

    Fixed in 4.36.0 (released Dec 11, 2023, 8 days before disclosure).

    The latest release, 5.22.2, is not affected.

  • CVE-2023-2800Medium 4.7

    Insecure Temporary File in huggingface/transformers

    Affected: fixed in 4.30.0; fixed in 4.30.0.

    Fixed in 4.30.0 (released Jun 8, 2023, 21 days after disclosure).

    The latest release, 5.22.2, is not affected.