553 matches found
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Denial of Service in huggingface/transformers [CVE-2025-3262, CVE-2025-3264, CVE-2025-3933, CVE-2025-3263]
Summary IBM Watson Speech Services Cartridge is vulnerable to a Denial of Service in huggingface/transformers, due to various issues identified within the package CVE-2025-3262, CVE-2025-3264, CVE-2025-3933, CVE-2025-3263. Huggingface/transformers is used in our speech service runtimes. This...
Regular Expression Denial Of Service (ReDoS)
Transformers is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient handling of numeric strings in the normalizenumbers method of the EnglishNormalizer class, which allows an attacker to exploit crafted input with long digit sequences to cause excessi...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-2099 DESCRIPTION: A vulnerability in the preprocessstring function of the transformers.testingutils module in...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-1194 DESCRIPTION: A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers...
Hugging Face Transformers 安全漏洞
Hugging Face Transformers is Hugging Face's open source advanced natural language processing for Jax, PyTorch and TensorFlow. A security vulnerability exists in Hugging Face Transformers version 1.20.0, which stems from the searchitemctrlf function splicing user input directly into XPath...
Exploit for Deserialization of Untrusted Data in Huggingface Transformers
Running - have docker and uv installed, then clone repo and run...
Regular Expression Denial Of Service (ReDoS)
transformers is vulnerable to a Regular Expression Denial Of Service ReDoS. The vulnerability is due to the douseweightdecay method in the AdamWeightDecay optimizer processing user-controlled regular expressions in the includeinweightdecay and excludefromweightdecay lists, which allows an attacke...
The vulnerability of the SubWordJapaneseTokenizer function in the Hugging Face Transformers library, which allows a hacker to trigger a service failure.
The vulnerability of the SubWordJapaneseTokenizer function in the Hugging Face Transformers library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
EUVD-2025-15691
Malicious code in bioql PyPI...
EUVD-2025-20214
Malicious code in bioql PyPI...
EUVD-2025-29032
Malicious code in bioql PyPI...
EUVD-2025-23827
Malicious code in bioql PyPI...
EUVD-2025-15128
Malicious code in bioql PyPI...
EUVD-2025-29125
Malicious code in bioql PyPI...
EUVD-2025-30889
Malicious code in bioql PyPI...
EUVD-2025-20215
Malicious code in bioql PyPI...
EUVD-2025-20217
Malicious code in bioql PyPI...
EUVD-2023-0299
Malicious code in bioql PyPI...