Product by Hugging Face
Transformers
12 known vulnerabilities in Transformers (Hugging Face), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-11392 | Hugging Face Transformers: Deserialization of Untrusted Data | 7.5 | |
| High | CVE-2024-11393 | Hugging Face Transformers: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2024-11394 | Hugging Face Transformers: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2026-80047 | Hugging Face Transformers library writes remote code to disk prior to consent check | 7.8 | |
| High | CVE-2025-14929 | Hugging Face Transformers: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2025-14920 | Hugging Face Transformers: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2025-14928 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2025-14926 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2025-14927 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2025-14930 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2025-14924 | Hugging Face Transformers: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2025-14921 | Hugging Face Transformers: Deserialization of Untrusted Data | 7.8 |