Lucene search
+L

6 matches found

BDU FSTEC
BDU FSTEC
•added 2026/03/24 12:00 a.m.•21 views

Transformers Library DoS

The vulnerability of the getimports function in the Transformers library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures...

5.3CVSS6.2AI score0.00496EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/07/07 12:30 p.m.•16 views

GHSA-JJPH-296X-MRCR Transformers vulnerable to ReDoS attack through its get_imports() function

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically in the getimports function within dynamicmoduleutils.py. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular...

5.3CVSS5.3AI score0.00496EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2025/07/07 12:30 p.m.•36 views

Transformers vulnerable to ReDoS attack through its get_imports() function

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically in the getimports function within dynamicmoduleutils.py. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular...

5.3CVSS5.4AI score0.00496EPSS
SaveExploits1References5Affected Software1
Mend
Mend
•added 2025/07/07 9:55 a.m.•13 views

CVE-2025-3264

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically in the "getimports" function within "dynamicmoduleutils.py". This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular...

6.9CVSS0.00496EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•7 views

CVE-2025-3264: Inefficient Regular Expression Complexity

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically in the getimports function within dynamicmoduleutils.py. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular...

5.3CVSS5.9AI score0.00496EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•3 views

PT-2025-55008

Уязвимость функции get imports библиотеки Transformers связана с использованием регулярного выражения с неэффективной вычислительной сложностью. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

5CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder