transformers (PyPI)
Advisories
56
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 5.10.0 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "transformers>=5.10.0"poetry
poetry add "transformers>=5.10.0"uv
uv add "transformers>=5.10.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-x9r9-c232-4q39 Hugging Face Transformers downloads custom generation code before trust consent |
High EPSS 0.10% |
>= 4.49.0, <= 5.8.1 | No fix yet |
| GHSA-x9r9-c232-4q39 Hugging Face Transformers downloads custom generation code before trust consent |
High EPSS 0.10% |
>= 4.49.0, <= 5.8.1 | No fix yet |
| GHSA-xrqw-3rrv-vx5w Transformers save_pretrained path traversal allows arbitrary file writes through chat template names |
High EPSS 0.46% |
< 5.10.0 | 5.10.0 |
| GHSA-xrqw-3rrv-vx5w Transformers save_pretrained path traversal allows arbitrary file writes through chat template names |
High EPSS 0.46% |
< 5.10.0 | 5.10.0 |
| GHSA-fgcw-684q-jj6r huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path |
Critical EPSS 0.60% |
< 5.5.0 | 5.5.0 |
| GHSA-fgcw-684q-jj6r huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path |
Critical EPSS 0.60% |
<= 5.2.0 | No fix yet |
| GHSA-29pf-2h5f-8g72 HuggingFace transformers vulnerable to remote code execution |
High EPSS 0.70% |
< 5.3.0 | 5.3.0 |
| GHSA-29pf-2h5f-8g72 HuggingFace transformers vulnerable to remote code execution |
High EPSS 0.70% |
< 5.3.0 | 5.3.0 |
| GHSA-69w3-r845-3855 HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class |
High EPSS 0.38% |
< 5.0.0rc3 | 5.0.0rc3 |
| GHSA-69w3-r845-3855 HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class |
High EPSS 0.38% |
< 5.0.0 | 5.0.0 |
| PYSEC-2025-218 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
High EPSS 0.33% |
<= 4.57.1 | No fix yet |
| PYSEC-2025-217 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
High EPSS 0.37% |
<= 5.0.0-rc0 | No fix yet |
| PYSEC-2025-216 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. |
High EPSS 0.34% |
<= 4.57.0 | No fix yet |
| PYSEC-2025-215 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. |
High EPSS 0.34% |
<= 4.57.0 | No fix yet |
| PYSEC-2025-214 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. |
High EPSS 0.34% |
<= 4.57.0 | No fix yet |
| PYSEC-2025-213 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
High EPSS 0.33% |
<= 4.55.0 | No fix yet |
| PYSEC-2025-212 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
High EPSS 0.33% |
<= 4.54.1 | No fix yet |
| PYSEC-2025-211 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
High EPSS 0.36% |
<= 4.54.1 | No fix yet |
| GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer |
High EPSS 0.51% |
< 4.53.0 | 4.53.0 |
| GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer |
High EPSS 0.51% |
< 4.53.0 | 4.53.0 |
| GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service |
Medium EPSS 0.38% |
< 4.53.0 | 4.53.0 |
| GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service |
Medium EPSS 0.38% |
< 4.53.0 | 4.53.0 |
| GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer |
High EPSS 0.56% |
< 4.53.0 | 4.53.0 |
| GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer |
High EPSS 0.56% |
< 4.53.0 | 4.53.0 |
| GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability |
Medium EPSS 0.42% |
< 4.53.0 | 4.53.0 |
| GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability |
Medium EPSS 0.42% |
< 4.53.0 | 4.53.0 |
| GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class |
Medium EPSS 0.50% |
< 4.52.1 | 4.52.1 |
| GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class |
Medium EPSS 0.50% |
< 4.52.1 | 4.52.1 |
| GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection |
Low EPSS 0.41% |
< 4.52.1 | 4.52.1 |
| GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection |
Low EPSS 0.41% |
< 4.52.1 | 4.52.1 |
| GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function |
Medium EPSS 0.50% |
< 4.51.0 | 4.51.0 |
| GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function |
Medium EPSS 0.50% |
< 4.51.0 | 4.51.0 |
| GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking |
Medium EPSS 0.50% |
< 4.51.0 | 4.51.0 |
| GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking |
Medium EPSS 0.50% |
< 4.51.0 | 4.51.0 |
| GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable |
High EPSS 0.49% |
>= 4.49.0, < 4.51.0 | 4.51.0 |
| GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable |
High EPSS 0.49% |
>= 4.49.0, < 4.51.0 | 4.51.0 |
| GHSA-qq3j-4f4f-9583 Hugging Face Transformers Regular Expression Denial of Service |
High EPSS 0.61% |
< 4.49.0 | 4.49.0 |
| GHSA-qq3j-4f4f-9583 Hugging Face Transformers Regular Expression Denial of Service |
High EPSS 0.61% |
< 4.50.0 | 4.50.0 |
| GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability |
Medium EPSS 0.49% |
< 4.50.0 | 4.50.0 |
| GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability |
Medium EPSS 0.49% |
< 4.50.0 | 4.50.0 |
| GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability |
High EPSS 0.75% |
< 4.48.0 | 4.48.0 |
| GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability |
High EPSS 0.75% |
< 4.48.0 | 4.48.0 |
| GHSA-wrfc-pvp9-mr9g Deserialization of Untrusted Data in Hugging Face Transformers |
High EPSS 3.27% |
< 4.48.0 | 4.48.0 |
| GHSA-hxxf-235m-72v3 Deserialization of Untrusted Data in Hugging Face Transformers |
High EPSS 2.73% |
< 4.48.0 | 4.48.0 |
| GHSA-hxxf-235m-72v3 Deserialization of Untrusted Data in Hugging Face Transformers |
High EPSS 2.73% |
< 4.48.0 | 4.48.0 |
| GHSA-wrfc-pvp9-mr9g Deserialization of Untrusted Data in Hugging Face Transformers |
High EPSS 3.27% |
< 4.48.0 | 4.48.0 |
| GHSA-qxrp-vhvm-j765 Deserialization of Untrusted Data in Hugging Face Transformers |
High EPSS 7.72% |
< 4.48.0 | 4.48.0 |
| GHSA-qxrp-vhvm-j765 Deserialization of Untrusted Data in Hugging Face Transformers |
High EPSS 7.72% |
< 4.48.0 | 4.48.0 |
| GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability |
Critical EPSS 2.08% |
< 4.38.0 | 4.38.0 |
| GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability |
Critical EPSS 2.08% |
< 4.38.0 | 4.38.0 |
| GHSA-v68g-wm8c-6x7j transformers has a Deserialization of Untrusted Data vulnerability |
High EPSS 0.73% |
< 4.36.0 | 4.36.0 |
| GHSA-v68g-wm8c-6x7j transformers has a Deserialization of Untrusted Data vulnerability |
High EPSS 0.73% |
< 4.36.0 | 4.36.0 |
| GHSA-3863-2447-669p transformers has a Deserialization of Untrusted Data vulnerability |
High EPSS 0.93% |
< 4.36.0 | 4.36.0 |
| GHSA-3863-2447-669p transformers has a Deserialization of Untrusted Data vulnerability |
High EPSS 0.93% |
< 4.36.0 | 4.36.0 |
| GHSA-282v-666c-3fvg transformers has Insecure Temporary File |
Medium EPSS 0.29% |
< 4.30.0 | 4.30.0 |
| GHSA-282v-666c-3fvg transformers has Insecure Temporary File |
Medium EPSS 0.29% |
< 4.30.0 | 4.30.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor