Product by Hugging Face
Huggingface/transformers
20 known vulnerabilities in Huggingface/transformers (Hugging Face), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-4372 | Huggingface/transformers: Missing Serialization Control Element | 7.8 | |
| Critical | CVE-2023-6730 | Deserialization of Untrusted Data in huggingface/transformers | 9.0 | |
| Critical | CVE-2026-5241 | Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers | 8.0 | |
| Critical | CVE-2023-7018 | Deserialization of Untrusted Data in huggingface/transformers | 9.6 | |
| Critical | CVE-2024-3568 | Arbitrary Code Execution via Deserialization in huggingface/transformers | 3.4 | |
| High | CVE-2026-9856 | Path Traversal in huggingface/transformers | 7.1 | |
| High | CVE-2026-1839 | Huggingface/transformers: Deserialization of Untrusted Data | 7.8 | |
| High | CVE-2024-12720 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| High | CVE-2025-2099 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| High | CVE-2025-6638 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| High | CVE-2025-6921 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| Medium | CVE-2025-3933 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| Medium | CVE-2025-3264 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| Medium | CVE-2025-3263 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| High | CVE-2025-3262 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| Medium | CVE-2025-5197 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| Medium | CVE-2025-6051 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 | |
| Medium | CVE-2025-1194 | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 4.3 | |
| Low | CVE-2025-3777 | Improper Input Validation in huggingface/transformers | 3.5 | |
| Medium | CVE-2023-2800 | Insecure Temporary File in huggingface/transformers | 4.7 |