GHSA-489J-G2VX-39WF Transformers vulnerable to ReDoS attack through its SETTING_RE variable

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the SETTINGRE variable within the transformers/commands/chat.py file. The...

CVE-2025-3262

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the "SETTINGRE" variable within the "transformers/commands/chat.py" file...

CVE-2025-3262: Inefficient Regular Expression Complexity

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the SETTINGRE variable within the transformers/commands/chat.py file. The...

PT-2025-55010

Уязвимость сценария transformers/commands/chat.py библиотеки Transformers связана с использованием регулярного выражения с неэффективной вычислительной сложностью при обработке переменной SETTING RE. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в...