Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2025/03/20 12:32 p.m.14 views

Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationnougatfast.py. The vulnerability occurs in the postprocesssingle function, where a regular expression processes specially crafted input. The issu...

7.5CVSS6.6AI score0.00228EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/20 10:11 a.m.5 views

CVE-2024-12720 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationnougatfast.py. The vulnerability occurs in the postprocesssingle function, where a regular expression processes specially crafted input. The issu...

5.3CVSS5.2AI score0.00228EPSS
Exploits0References2
Huntr
Huntr
added 2024/12/03 10:12 a.m.12 views

Regular expression Denial of Service - ReDoS

Description A Regular Expression Denial of Service ReDoS vulnerability identified in the Transformers library, specifically in the file tokenizationnougatfast.py. The vulnerability occurs in the postprocesssingle function, where a regular expression processes specially crafted input. The issue...

7.5CVSS6.2AI score0.00228EPSS
Exploits0
OSV
OSV
added 2021/06/22 1:14 a.m.18 views

GHSA-257V-VJ4P-3W2H Regular Expression Denial of Service (ReDOS)

In the npm package color-string, there is a ReDos Regular Expression Denial of Service vulnerability regarding an exponential time complexity for linearly increasing input lengths for hwb color strings. Strings reaching more than 5000 characters would see several milliseconds of processing time;...

5.3CVSS5.4AI score0.00396EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2021/06/22 1:14 a.m.50 views

Regular Expression Denial of Service (ReDOS)

In the npm package color-string, there is a ReDos Regular Expression Denial of Service vulnerability regarding an exponential time complexity for linearly increasing input lengths for hwb color strings. Strings reaching more than 5000 characters would see several milliseconds of processing time;...

5.3CVSS2.7AI score0.00396EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder