Transformers Regular Expression Denial of Service (ReDoS) vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-12720 · ADVISORY
• huggingface/transformers commit deac971 · WEB
• huggingface/transformers · PACKAGE
• huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98 · WEB
• pypi.org/project/transformers · PACKAGE
• GitHub Advisory GHSA-6rvg-6v2m-4j46 · ADVISORY

Lỗ hổng khác của transformers

• CVE-2026-80047CAO 7.8A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to local disk without user…
• CVE-2026-9856CAO 7.1A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. Th…
• CVE-2026-5241NGHIÊM TRỌNG 9.6A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository…
• CVE-2026-4372CAO 7.8A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vu…
• CVE-2026-1839CAO 7.8A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_loa…