Known vulnerabilities in transformers

Software: transformers
Software CPE: cpe:2.3:a:huggingface:transformers:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting transformers transformers is affected by 23 known vulnerabilities: 15 high, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141568 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-5241
CWE-829 Medium
No
No
5.3.0 12.08.2026 SB2026081250
SB2026081251
SB2026081414
#VU139816 - Deserialization of Untrusted Data
CVE-2026-1839
CWE-502 Low
No
No
5.0.0 28.07.2026 SB2026072823
SB2026072825
#VU123001 - Improper input validation
CVE-2025-3777
CWE-20 Low
No
No
4.52.1 17.02.2026 SB2026021779
#VU122994 - Inefficient Regular Expression Complexity
CVE-2025-3263
CWE-1333 Medium
No
No
4.51.0 17.02.2026 SB2026021760
#VU122993 - Inefficient Regular Expression Complexity
CVE-2025-2099
CWE-1333 High
No
No
4.50.0 17.02.2026 SB2026021759
SB2026021761
SB2026042806
#VU122991 - Inefficient Regular Expression Complexity
CVE-2025-5197
CWE-1333 Medium
No
No
4.53.0 17.02.2026 SB2026021756
SB2026022340
#VU122990 - Inefficient Regular Expression Complexity
CVE-2025-3264
CWE-1333 Medium
No
No
4.51.0 17.02.2026 SB2026021755
#VU122988 - Inefficient Regular Expression Complexity
CVE-2025-3933
CWE-1333 Medium
No
No
4.52.1 17.02.2026 SB2026021753
SB2026022423
#VU121634 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-14928
CWE-94 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121633 - Deserialization of Untrusted Data
CVE-2025-14930
CWE-502 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121632 - Deserialization of Untrusted Data
CVE-2025-14929
CWE-502 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121631 - Deserialization of Untrusted Data
CVE-2025-14924
CWE-502 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121630 - Deserialization of Untrusted Data
CVE-2025-14920
CWE-502 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121629 - Deserialization of Untrusted Data
CVE-2025-14921
CWE-502 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121628 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-14927
CWE-94 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU121627 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-14926
CWE-94 High
No
No
- 16.01.2026 SB20260116118
SB2026030220
SB2026030311
and 3 more
#VU113036 - Deserialization of Untrusted Data
CVE-2024-11392
CWE-502 High
No
No
4.48.0 18.07.2025 SB2025071815
SB2025071816
SB2026031707
#VU113035 - Deserialization of Untrusted Data
CVE-2024-11393
CWE-502 High
No
No
4.48.0 18.07.2025 SB2025071814
SB2025071816
SB2026031707
#VU113033 - Deserialization of Untrusted Data
CVE-2024-11394
CWE-502 High
No
No
4.48.0 18.07.2025 SB2025071813
SB2025071816
SB2026031707
#VU108910 - Inefficient Regular Expression Complexity
CVE-2025-1194
CWE-1333 Medium
No
No
4.48.2 12.05.2025 SB2025051218
SB2025051220
SB2025052964
and 3 more


Showing elements 1 - 20 out of 23