Skip to content
OpenAdvisories
Medium WID-SEC-2025-1518 4 CVEs

IBM App Connect Enterprise: Mehrere Schwachstellen

Published Jul 9, 2025 · Updated Jul 9, 2025 · de-DE

Vendor: IBM Product: App Connect Enterprise Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, und um falsche Informationen darzustellen.

Product

IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Vulnerabilities 4

  • Medium 5.3
    CVE-2025-3262

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the `SETTING_RE` variable within t…

    Hugging Face huggingface/transformers transformers PyPI
  • Medium 5.3
    CVE-2025-3263

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuration_utils` module. The affected version is 4.49.0,…

    Hugging Face huggingface/transformers transformers PyPI
  • Medium 5.3
    CVE-2025-3264

    Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerability affects versions 4.49.0 and is fixed in ver…

    Hugging Face huggingface/transformers transformers PyPI
  • Low 3.5
    CVE-2025-3777

    Improper Input Validation in huggingface/transformers

    Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL u…

    Hugging Face huggingface/transformers transformers PyPI

Revision history

  1. #1

    Initiale Fassung

References