transformers

12 results · Clear filters · Feed

• High 7.8
  CVE-2026-80047

  Hugging Face Transformers library writes remote code to disk prior to consent check

  A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to local disk without user consent when using GenerativePreTrainedModel.load_custom_generate(). The function fetches and caches a remote module f…

  Hugging Face transformers transformers PyPI
  Sep 1, 2026
• High 7.8
  CVE-2025-14930

  Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to …

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 7.8
  CVE-2025-14928

  Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

  Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to ex…

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 7.8
  CVE-2025-14924

  Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is req…

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 7.8
  CVE-2025-14920

  Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is r…

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 7.8
  CVE-2025-14926

  Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

  Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to explo…

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 7.8
  CVE-2025-14927

  Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

  Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exp…

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 7.8
  CVE-2025-14921

  Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction…

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 7.8
  CVE-2025-14929

  Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User int…

  Hugging Face transformers transformers PyPI
  Dec 23, 2025
• High 8.8
  CVE-2024-11394 Public exploit

  Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requir…

  Hugging Face transformers transformers PyPI
  Nov 22, 2024
• High 8.8
  CVE-2024-11393 Public exploit

  Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is …

  Hugging Face transformers transformers PyPI
  Nov 22, 2024
• High 7.5
  CVE-2024-11392 Public exploit

  Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

  Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is requi…

  Hugging Face transformers transformers PyPI
  Nov 22, 2024