CVE-2025-3263

🗓️ 07 Jul 2025 17:15:57Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 2 Views

Mitigation options for CVE-2025-3263 do not meet Red Hat security criteria for deployment and stability.

Reporter	Title	Published	Views	Family All 18
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service and improper input validation [CVE-2025-3262] [CVE-2025-3263] [CVE-2025-3264] [CVE-2025-3777]	9 Jul 202517:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Denial of Service in huggingface/transformers [CVE-2025-3262, CVE-2025-3264, CVE-2025-3933, CVE-2025-3263]	31 Oct 202518:45	–	ibm
Huntr	Regular expression Denial of Service - ReDoS	15 Mar 202519:42	–	huntr
Chainguard	CVE-2025-3263 vulnerabilities	14 Jan 202601:17	–	cgr
Circl	CVE-2025-3263	7 Jul 202511:20	–	circl
CNNVD	Hugging Face Transformers 安全漏洞	7 Jul 202500:00	–	cnnvd
CVE	CVE-2025-3263	7 Jul 202509:54	–	cve
Cvelist	CVE-2025-3263 Regular Expression Denial of Service (ReDoS) in huggingface/transformers	7 Jul 202509:54	–	cvelist
EUVD	EUVD-2025-20215	3 Oct 202520:07	–	euvd
Github Security Blog	Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking	7 Jul 202512:30	–	github

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-3263
github	www.github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76
huntr	www.huntr.com/bounties/c7a69150-54f8-4e81-8094-791e7a2a0f29
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

07 Jul 2025 19:26Current

5Medium risk

Vulners AI Score5

CVSS 35.3

EPSS0.00096

SSVC

cve-2025-3263 red hat security mitigation options