Huggingface vulnerabilities
40 CVEs and advisories name Huggingface as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-3263Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-3262Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-2099Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-1194Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2024-12720Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2024-3924Code Injection in huggingface/text-generation-inference
- CVE-2024-3568Arbitrary Code Execution via Deserialization in huggingface/transformers
- CVE-2023-7018Deserialization of Untrusted Data in huggingface/transformers
- CVE-2023-6730Deserialization of Untrusted Data in huggingface/transformers
- CVE-2023-2800Insecure Temporary File in huggingface/transformers