transformers

4 results · Clear filters · Feed

• High 7.8
  CVE-2026-4372 Public exploit

  Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

  A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config.json` file containing the `_attn_implementation_internal` f…

  huggingface huggingface/transformers transformers PyPI
  May 24, 2026
• High 8.8
  CVE-2024-11394 Public exploit

  Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requir…

  Hugging Face Transformers transformers PyPI
  Nov 22, 2024
• High 8.8
  CVE-2024-11393 Public exploit

  Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is …

  Hugging Face Transformers transformers PyPI
  Nov 22, 2024
• High 7.5
  CVE-2024-11392 Public exploit

  Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requi…

  Hugging Face Transformers transformers PyPI
  Nov 22, 2024