Hugging Face Transformers Regular Expression Denial of Service

高 7.5CVE-2025-2099 · GHSA-qq3j-4f4f-9583 · PYSEC-2025-40 · 19/05/2025 公開 · 17/06/2026 更新

要点

CVE-2025-2099 は transformers, transformers (huggingface) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.61%（全脆弱性の 49.1% より高い）。
対処：4.49.0, 4.50.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
transformers PyPI	`< 4.49.0< 4.50.0`	`4.49.04.50.0`
transformers huggingface	`≤ 4.48.3`	修正版なし

概要

A Regular Expression Denial of Service (ReDoS) exists in the preprocess_string() function of the transformers.testing_utils module. In versions before 4.50.0, the regex used to process code blocks in docstrings contains nested quantifiers that can trigger catastrophic backtracking when given inputs with many newline characters. An attacker who can supply such input to preprocess_string() (or code paths that call it) can force excessive CPU usage and degrade availability.

Fix: released in 4.50.0, which rewrites the regex to avoid the inefficient pattern. ([GitHub][1])

Affected: < 4.50.0
Patched: 4.50.0

NVD の説明

A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.