transformers vulnerabilities (PyPI)
32 vulnerabilities.
-
transformersPyPI Hugging Face Transformers library writes remote code to disk prior to consent check 7.8 High -
transformersPyPI Path Traversal in huggingface/transformers 7.1 High -
transformersPyPI Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers 8.0 High -
transformersPyPI Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers 7.8 High -
transformersPyPI Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers 6.5 Medium -
transformersPyPI Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.8 High -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Improper Input Validation in huggingface/transformers 3.5 Low -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 4.3 Medium -
transformersPyPI Regular Expression Denial of Service (ReDoS) in huggingface/transformers 5.3 Medium -
transformersPyPI Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 8.8 High -
transformersPyPI Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 8.8 High -
transformersPyPI Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.5 High -
transformersPyPI Arbitrary Code Execution via Deserialization in huggingface/transformers 3.4 Low -
transformersPyPI Deserialization of Untrusted Data in huggingface/transformers 9.6 Critical -
transformersPyPI Deserialization of Untrusted Data in huggingface/transformers 9.0 Critical -
transformersPyPI Insecure Temporary File in huggingface/transformers 4.7 Medium