repository icon
huggingface / transformers Project repository

🤗 Transformers: State-of-the-art Machine Learning for Pytorch, TensorFlow, and JAX.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN46 DAYS

FIX

WITHIN88 DAYS

Path Traversal (Tarslip) in Hugging Face Transformers
locus-x64
duplicate
High
Arbitrary Code Execution via Unsafe Deserialization in convert_nanochat_checkpoi...
daddyjamwal
duplicate
High
Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading
colemurray
duplicate
High
Critical Remote Code Execution via Insecure Pickle Deserialization in HuggingFac...
abdallaabdalrhman
duplicate
Critical
Arbitrary Code Execution via Pickle Deserialization in TextDataset
vitalysim
duplicate
High
Arbitrary Code Execution via `eval()` in SEW-D Checkpoint Converter
vitalysim
duplicate
High
Insecure Deserialization in RAG module's LegacyIndex allows Arbitrary Code Exe...
stevenjulian1528
duplicate
High
ZDI-CAN-28309: Hugging Face Transformers GLM4 Deserialization of Untrusted Data...
zdi-disclosures
duplicate
High
Remote Code Execution in Nanochat Converter via Unsafe Tokenizer Deserialization
jonnylitten
informative
High
Remote Code Execution via eval() in Fairseq Checkpoint Conversion Scripts
daridor9
duplicate
High
Exposed Hugging Face Hub Staging Token in Test Utilities
gyde04
informative
High
Exposed Hugging Face Hub Token in CircleCI Configuration
gyde04
informative
Critical
Arbitrary Directory Deletion via Symlink Attack in Transformers setup.py
manasharsh
informative
High
Remote Code Execution via unsafe torch.load() in LLaMA Weights Converter
daridor9
duplicate
High
Memory DoS in Doge Model MoE Layer
0xmrniko
informative
High
Downmix Implementation as Attack Vector Against Audio Transformer Models
kexinoh
informative
Medium
Malicious model on Hugging Face → Arbitrary File Write (TarSlip) in NeMo (Parake...
taiphung217
self closed
Critical RCE: Explicit weights_only=False in Megatron GPT-2 Checkpoint Converter
daridor9
duplicate
Critical
RCE via insecure pickle deserialization
sonw-vh
informative
Critical
Path Traversal Vulnerability in HuggingFace Transformers Model Conversion Script...
yousefabdelmohymen
informative
Medium
Path Traversal Leading to Arbitrary File Read
joelindra
informative
High
Path Traversal in Checkpoint Resumption
joelindra
pending
Server-Side Request Forgery (SSRF)
joelindra
informative
Critical
Insecure Deserialization leading to Remote Code Execution (RCE)
joelindra
duplicate
Critical
Path Traversal leading to Arbitrary File Write/Read
joelindra
informative
Critical
Division by Zero (Leading to Denial of Service)
joelindra
informative
High
Unsafe tarfile extraction allows directory traversal and arbitrary file overwrit...
slezzz
informative
High
Unsafe eval() usage in configuration parsing allows code execution
slezzz
duplicate
High
Unsafe torch.load() Without weights_only Parameter
slezzz
duplicate
High
Unrestricted CORS Configuration
swilliams9772
informative
Medium
Path Traversal in Archive Extraction (Zip/TarSlip)
swilliams9772
informative
High
Code Injection via Unsafe YAML Deserialization
swilliams9772
duplicate
Critical
Command Injection in SageMaker Distributed Training Script
vutuanviet123
informative
Critical
Arbitrary Code Execution via eval() in SEW Model Conversion Scripts
vutuanviet123
duplicate
Critical
Path Traversal Vulnerability in Llama Model Conversion Script
vutuanviet123
informative
High
RCE in Hugging Face Transformers: Unsafe Deserialization in Dataset Loaders
grugrog
informative
Critical
TOCTOU Race Condition in Transformers Configuration Loading Compromises Training...
rudra2018
informative
Medium
CRITICAL Rce
shemshallah
not applicable
Critical RCE via trust_remote_code in Hugging Face Transformers Pipelines (Code...
rudra2018
duplicate
Critical
Unsafe use of torch.load() in HuggingFace Transformers leads to Arbitrary Code E...
ko7-dev
informative
Critical
ZDI-CAN-27984: Hugging Face Transformers megatron_gpt2 Deserialization of Untrus...
zdi-disclosures
informative
High
Regular expression Denial of Service - ReDoS
mhnrv
duplicate
Medium
ReDoS Vulnerability Reoccurred in tokenization_gptsan_japanese.py Due to Inadequ...
freedom-of-the-mind
informative
Medium
Server-Side Request Forgery (SSRF) via Transformers Pipelines
ohmymagic
informative
Medium
Remote Code Execution in transformers.AutoModel.from_pretrained via malicious mo...
echooriginai
duplicate
Critical
Regular expression Denial of Service - ReDoS in huggingface/transformers in hugg...
jiang-niao
duplicate
Medium
Regular expression Denial of Service - ReDoS
arjunshibu
informative
Medium
Infinite Loop DoS via Malicious Tokenizer In Transformers TextGenerationPipeline
ashmitsh4rma
informative
High
Remote Code Execution via trust_remote_code Parameter in Transformers Model Load...
kn0x0x
duplicate
Critical
Arbitrary Code Execution via `trust_remote_code=True` in Hugging Face Transforme...
balook
duplicate
Medium
Dependacy chain attack through hijacking broken github repository at https://gi...
gopal-ethical
Low
•$20•CVE-2025-11264
Remote Code Execution (RCE) via Deserialization in BloomTokenizerFast
mohammad-abd-el-fattah
informative
High
Secrets Exfiltration via vulnerable workflow
gauss-security
informative
Critical
Regular Expression Denial of Service (ReDoS) in AdamWeightDecay Optimizer
joelindra
Medium
•$125•CVE-2025-6921
Arbitrary Code Execution via YAML Deserialization and Gadget Chaining
joelindra
informative
High
Path Traversal in Tokenizer Conversion Script
joelindra
Low
•$20•CVE-2025-11231
Regular expression Denial of Service - ReDoS
arjunshibu
Medium
•$125•CVE-2025-6638
Remote Code Execution via Unsafe eval() in SEW/SEW-D Model Conversion Scripts
sahiloj
not applicable
Regular expression Denial of Service - ReDoS
arjunshibu
Medium
•$125•CVE-2025-6051
Insecure Deserialization via Pickle Cache
taiphung217
informative
High
Regular expression Denial of Service - ReDoS
arjunshibu
Medium
•$125•CVE-2025-5197
Remote Code Execution in Hugging Face Transformers via trust_remote_code=True Us...
michaelpierre
informative
High
Sandbox Escape in Python Code Interpreter Tool in transformers
jackfromeast
informative
High
Regular expression Denial of Service - ReDoS in huggingface/transformers
arjunshibu
Medium
•$125•CVE-2025-3933
Code Injection via Unsafe Model Configuration in transformershubconf.py
54j4n
informative
Critical
Potential Arbitrary Code Execution Vulnerability in convert_mlcvnets_to_pytorch....
kexinoh
informative
High
ReDOS Vulnerability
aydinnyunus
duplicate
High
URL Parsing Issue
aydinnyunus
Low
•$20•CVE-2025-3777
Regular expression Denial of Service - ReDoS
arjunshibu
Medium
•$125•CVE-2025-3264
Regular expression Denial of Service - ReDoS
arjunshibu
Medium
•$125•CVE-2025-3263
Regular expression Denial of Service - ReDoS
taiphung217
Medium
•$125•CVE-2025-3262
Regular expression Denial of Service - ReDoS
taiphung217
Medium
•$125•CVE-2025-2099
Regular expression Denial of Service - ReDoS
taiphung217
Medium
•$125•CVE-2025-1194
Regular expression Denial of Service - ReDoS
taiphung217
Medium
•$125•CVE-2024-12720
WaitCanDeadlock
amanhasan01
informative
Critical
Path Traversal
amanhasan01
spam
Remote Code Execution via Unsafe Torch Load in TransfoXLCorpus
zpbrent
Low
•$20
Malicious model deployed in HF repo to reversed RCE and worm infection by RealmR...
azraelxuemo
duplicate
High
ZDI-CAN-25424: Hugging Face Transformers Transformer-XL Model Deserialization of...
zdi-disclosures
informative
High
ZDI-CAN-25423: Hugging Face Transformers Perceiver Model Deserialization of Untr...
zdi-disclosures
duplicate
High
ZDI-CAN-25012: New Vulnerability Report
zdi-disclosures
informative
High
ZDI-CAN-25191: Hugging Face Transformers MaskFormer Model Deserialization of Unt...
zdi-disclosures
informative
High
Improper sanitization of Branch Name Leads to Arbitrary Code Injection
arunstar
informative
High
ZDI-CAN-24322: Hugging Face Transformers MobileViTV2 Deserialization of Untruste...
zdi-disclosures
informative
High
RCE when loading HuggingFace Hub tool from a collection using the ToolCollection
wangxuefei0912
duplicate
High
Access tokens exposure in git repo
giantathos
informative
None
Remote Code Execution through Deserilization of Untrusted data in convert_maskfo...
piyush-bhor
informative
High
Code execution with CodeAgent
0gur1
informative
High
Insecure Temporary File
h2oa
informative
Medium
OS command injection
tuna18dv
informative
Critical
RCE when loading HuggingFace Hub 'tools' in 'src/transformers/tools/base.py' ->...
retr0reg
Medium
•$125
test
lengochoa7112000
self closed
Transformers has a Deserialization of Untrusted Data vulnerability
retr0reg
Low
•$20•CVE-2024-3568
ReDos in tokenization_gptsan_japanese.py#L466
lujiefsi
spam
Malicious model deployed in HF repo to reversed RCE and worm infection by RagRet...
zpbrent
Critical
•$1500•CVE-2023-6730
An unverified deserialized data stream of function trust was found in transform...
carnival-z
informative
Critical
Time of check time of use (toctou) Race Condition
hiu240900
not applicable
Arbitrary Code Execution via YAML Deserialisation
b3ef
informative
Medium
Remote Code Execution (RCE)
ready-research
self closed
Stored XSS reflected on model endpoint
immortalengine1
informative
Critical
Re: “Per-reference”: Enter: Brute-Level Bot
xavier6
spam
Malicious model to RCE by vocab file load in TransfoXLTokenizer (as well as the...
zpbrent
Critical
•$1500•CVE-2023-7018
Deserialisation of Untrusted data Leading to Arbitrary Code Execution
b3ef
not applicable
Unsafe `yaml.load` is used in `convert_mlcvnets_to_pytorch` and `convert_marian_...
lyutoon
informative
High
Unsafe deserialize
nhienit2010
self closed
RATE CONDITION LEAD TO DOS
novemberdad
not applicable
CORS - In COmments reaction..
panveanyy
spam
CVE-2021-30473 - Detected
saintsconnor
informative
Critical
Buffer Overflow - aom/libaom0@1.0.0.errata1-3
saintsconnor
informative
Critical
Vulnearble to path travelsal
0xparth
informative
Critical
Amazon AWS S3 Bucket Misconfigurations (Upload, Dowload, List out any file to S3...
harshbanshpal
informative
Critical
EXIF Geolocation Data Not Stripped From Uploaded Profile Images in https://huggi...
harshbanshpal
informative
Medium
Inefficient Regular Expression Complexity(ReDoS)
ready-research
informative
High
Insecure Temporary File
ready-research
Medium
•$980•CVE-2023-2800
Command Injection in utils/check_self_hosted_runner.py
danmcinerney
informative
Low
Lack of Character Limit in Full Name Sections Leads to Denial of Service in
7h3h4ckv157
not applicable
Inefficient Regular Expression Complexity
dwisiswant0
informative
Medium