# transformers (PyPI) vulnerabilities 32 known vulnerabilities (2 critical, 15 high, 13 medium, 2 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 5.22.2 (Nov 6, 2026): no advisory with comparable ranges affects it; 1 advisory (CVE-2025-2099) can't be checked against versions - Newest unaffected release: 5.22.2 (Nov 6, 2026), the latest release, not counting 1 advisory without comparable ranges - Weekly downloads: 27.8M - Dependents: 9,838 - Releases: 252 since 0.1.0 (Aug 17, 2016) - Registry: https://pypi.org/project/transformers/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-80047: 4.49.0 to 5.8.1 (5.9.0 is outside it) - CVE-2026-9856: 0.1.0 to 5.9.0 (5.10.0 is outside it) - CVE-2026-5241: 0.1.0 to 5.4.0 (5.5.0 is outside it) - CVE-2026-4372: 0.1.0 to 5.2.0 (5.3.0 is outside it) - CVE-2026-1839: 0.1.0 to 5.0.0rc3 (5.0.0 is outside it) - CVE-2025-14930: 0.1.0 to 4.57.1 (4.57.2 is outside it) - CVE-2025-14928: 0.1.0 to 4.57.0 (4.57.1 is outside it) - CVE-2025-14924: 0.1.0 to 4.55.0 (4.55.1 is outside it) - CVE-2025-14920: 0.1.0 to 4.54.1 (4.55.0 is outside it) - CVE-2025-14926: 0.1.0 to 4.57.0 (4.57.1 is outside it) - CVE-2025-14927: 0.1.0 to 4.57.0 (4.57.1 is outside it) - CVE-2025-14921: 0.1.0 to 4.54.1 (4.55.0 is outside it) - CVE-2025-14929: 0.1.0 to 5.0.0rc0 (5.0.0rc1 is outside it) - CVE-2025-6921: 0.1.0 to 4.52.4 (4.53.0 is outside it) - CVE-2025-6051: 0.1.0 to 4.52.4 (4.53.0 is outside it) - CVE-2025-6638: 0.1.0 to 4.52.4 (4.53.0 is outside it) - CVE-2025-5197: 0.1.0 to 4.52.4 (4.53.0 is outside it) - CVE-2025-3933: 0.1.0 to 4.52.0 (4.52.1 is outside it) - CVE-2025-3777: 0.1.0 to 4.52.0 (4.52.1 is outside it) - CVE-2025-3264: 0.1.0 to 4.50.3 (4.51.0 is outside it) - CVE-2025-3263: 0.1.0 to 4.50.3 (4.51.0 is outside it) - CVE-2025-3262: 4.49.0 to 4.50.3 (4.51.0 is outside it) - CVE-2025-2099: its ranges can't be placed on these versions - CVE-2025-1194: 0.1.0 to 4.49.0 (4.50.0 is outside it) - CVE-2024-12720: 0.1.0 to 4.47.1 (4.48.0 is outside it) - CVE-2024-11394: 0.1.0 to 4.47.1 (4.48.0 is outside it) - CVE-2024-11393: 0.1.0 to 4.47.1 (4.48.0 is outside it) - CVE-2024-11392: 0.1.0 to 4.47.1 (4.48.0 is outside it) - CVE-2024-3568: 0.1.0 to 4.37.2 (4.38.0 is outside it) - CVE-2023-7018: 0.1.0 to 4.35.2 (4.36.0 is outside it) - CVE-2023-6730: 0.1.0 to 4.35.2 (4.36.0 is outside it) - CVE-2023-2800: 0.1.0 to 4.29.2 (4.30.0 is outside it) ## Advisories (32) ### [CVE-2026-80047](https://cve.now/CVE-2026-80047): Hugging Face Transformers library writes remote code to disk prior to consent check - Severity: High 7.8 - Published: Sep 1, 2026 - Affected: from 4.49.0, through 5.8.1. - Fixed in 5.9.0 (released May 20, 2026, 104 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2026-9856](https://cve.now/CVE-2026-9856): Path Traversal in huggingface/transformers - Severity: High 7.1 - Published: Aug 2, 2026 - Affected: fixed in 5.10.0. - Fixed in 5.10.0 (released Jun 3, 2026, 60 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2026-5241](https://cve.now/CVE-2026-5241): Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers - Severity: High 8.0 - Published: Jun 3, 2026 - Affected: fixed in 5.5.0; through 5.2.0. - Fixed in 5.5.0 (released Apr 2, 2026, 62 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2026-4372](https://cve.now/CVE-2026-4372): Arbitrary Remote Code Execution via \`\_attn\_implementation\_internal\` Config Injection in huggingface/transformers - Severity: High 7.8 - Published: May 24, 2026 - Affected: fixed in 5.3.0. - Fixed in 5.3.0 (released Mar 4, 2026, 81 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2026-1839](https://cve.now/CVE-2026-1839): Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers - Severity: Medium 6.5 - Published: Apr 7, 2026 - Affected: fixed in 5.0.0; fixed in 5.0.0rc3. - Fixed in 5.0.0 (released Jan 26, 2026, 71 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14930](https://cve.now/CVE-2025-14930): Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 4.57.1. - Fixed in 4.57.2 (released Nov 24, 2025, 29 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14928](https://cve.now/CVE-2025-14928): Hugging Face Transformers HuBERT convert\_config Code Injection Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 4.57.0. - Fixed in 4.57.1 (released Oct 14, 2025, 70 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14924](https://cve.now/CVE-2025-14924): Hugging Face Transformers megatron\_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 4.55.0. - Fixed in 4.55.1 (released Aug 13, 2025, 132 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14920](https://cve.now/CVE-2025-14920): Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 4.54.1. - Fixed in 4.55.0 (released Aug 5, 2025, 140 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14926](https://cve.now/CVE-2025-14926): Hugging Face Transformers SEW convert\_config Code Injection Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 4.57.0. - Fixed in 4.57.1 (released Oct 14, 2025, 70 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14927](https://cve.now/CVE-2025-14927): Hugging Face Transformers SEW-D convert\_config Code Injection Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 4.57.0. - Fixed in 4.57.1 (released Oct 14, 2025, 70 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14921](https://cve.now/CVE-2025-14921): Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 4.54.1. - Fixed in 4.55.0 (released Aug 5, 2025, 140 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-14929](https://cve.now/CVE-2025-14929): Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 7.8 - Published: Dec 23, 2025 - Affected: through 5.0.0-rc0. - Fixed in 5.0.0 (released Jan 26, 2026, 34 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 5.22.2, is not affected. ### [CVE-2025-6921](https://cve.now/CVE-2025-6921): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Sep 23, 2025 - Affected: fixed in 4.53.0. - Fixed in 4.53.0 (released Jun 26, 2025, 89 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-6051](https://cve.now/CVE-2025-6051): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Sep 14, 2025 - Affected: fixed in 4.53.0. - Fixed in 4.53.0 (released Jun 26, 2025, 80 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-6638](https://cve.now/CVE-2025-6638): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Sep 12, 2025 - Affected: fixed in 4.53.0. - Fixed in 4.53.0 (released Jun 26, 2025, 78 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-5197](https://cve.now/CVE-2025-5197): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Aug 6, 2025 - Affected: fixed in 4.53.0. - Fixed in 4.53.0 (released Jun 26, 2025, 41 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-3933](https://cve.now/CVE-2025-3933): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Jul 11, 2025 - Affected: fixed in 4.52.1. - Fixed in 4.52.1 (released May 20, 2025, 52 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-3777](https://cve.now/CVE-2025-3777): Improper Input Validation in huggingface/transformers - Severity: Low 3.5 - Published: Jul 7, 2025 - Affected: fixed in 4.52.1. - Fixed in 4.52.1 (released May 20, 2025, 48 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-3264](https://cve.now/CVE-2025-3264): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Jul 7, 2025 - Affected: fixed in 4.51.0. - Fixed in 4.51.0 (released Apr 5, 2025, 93 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-3263](https://cve.now/CVE-2025-3263): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Jul 7, 2025 - Affected: fixed in 4.51.0. - Fixed in 4.51.0 (released Apr 5, 2025, 93 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-3262](https://cve.now/CVE-2025-3262): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Jul 7, 2025 - Affected: from 4.49.0, fixed in 4.51.0. - Fixed in 4.51.0 (released Apr 5, 2025, 93 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2025-2099](https://cve.now/CVE-2025-2099): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: May 19, 2025 - Affected: fixed in 4.50.0; fixed in 4.49.0. ### [CVE-2025-1194](https://cve.now/CVE-2025-1194): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 4.3 - Published: Apr 29, 2025 - Affected: fixed in 4.50.0. - Fixed in 4.50.0 (released Mar 21, 2025, 39 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2024-12720](https://cve.now/CVE-2024-12720): Regular Expression Denial of Service (ReDoS) in huggingface/transformers - Severity: Medium 5.3 - Published: Mar 20, 2025 - Affected: fixed in 4.48.0. - Fixed in 4.48.0 (released Jan 10, 2025, 69 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2024-11394](https://cve.now/CVE-2024-11394): Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 8.8 - Published: Nov 22, 2024 - Affected: fixed in 4.48.0. - Fixed in 4.48.0 (released Jan 10, 2025, 49 days after disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2024-11393](https://cve.now/CVE-2024-11393): Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 8.8 - Published: Nov 22, 2024 - Affected: fixed in 4.48.0. - Fixed in 4.48.0 (released Jan 10, 2025, 49 days after disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2024-11392](https://cve.now/CVE-2024-11392): Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability - Severity: High 7.5 - Published: Nov 22, 2024 - Affected: fixed in 4.48.0. - Fixed in 4.48.0 (released Jan 10, 2025, 49 days after disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2024-3568](https://cve.now/CVE-2024-3568): Arbitrary Code Execution via Deserialization in huggingface/transformers - Severity: Low 3.4 - Published: Apr 10, 2024 - Affected: fixed in 4.38.0. - Fixed in 4.38.0 (released Feb 21, 2024, 49 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2023-7018](https://cve.now/CVE-2023-7018): Deserialization of Untrusted Data in huggingface/transformers - Severity: Critical 9.6 - Published: Dec 20, 2023 - Affected: fixed in 4.36.0; fixed in 4.36.0. - Fixed in 4.36.0 (released Dec 11, 2023, 9 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2023-6730](https://cve.now/CVE-2023-6730): Deserialization of Untrusted Data in huggingface/transformers - Severity: Critical 9.0 - Published: Dec 19, 2023 - Affected: fixed in 4.36.0; fixed in 4.36.0. - Fixed in 4.36.0 (released Dec 11, 2023, 8 days before disclosure). - The latest release, 5.22.2, is not affected. ### [CVE-2023-2800](https://cve.now/CVE-2023-2800): Insecure Temporary File in huggingface/transformers - Severity: Medium 4.7 - Published: May 18, 2023 - Affected: fixed in 4.30.0; fixed in 4.30.0. - Fixed in 4.30.0 (released Jun 8, 2023, 21 days after disclosure). - The latest release, 5.22.2, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/transformers Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.