Lucene search
+L

6 matches found

osv_pysec
osv_pysec
•added 2026/07/07 4:03 p.m.•29 views

PYSEC-2026-1980 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

5.3CVSS5.8AI score0.00511EPSS
SaveExploits1References7
Mend
Mend
•added 2025/09/23 1:56 p.m.•61 views

CVE-2025-6921

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2025/09/23 1:56 p.m.•33 views

CVE-2025-6921 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

5.3CVSS0.00511EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/09/23 1:56 p.m.•8 views

CVE-2025-6921 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

5.3CVSS5.8AI score0.00511EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•5 views

CVE-2025-6921: Uncontrolled Resource Consumption

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/06/18 12:00 a.m.•31 views

PT-2025-39174

Name of the Vulnerable Software and Affected Versions huggingface/transformers versions prior to 4.53.0 Description The software is susceptible to a Regular Expression Denial of Service ReDoS within the AdamWeightDecay optimizer. The issue stems from the do use weight decay method, which handles...

7.5CVSS5.7AI score0.00511EPSS
SaveExploits1References18
Rows per page
Query Builder