The vulnerability in the Transformers/commands/chat.py script of the library allows a hacker to trigger a service failure.

The vulnerability in the Transformers/commands/chat.py library’s script is related to the use of a regular expression with inefficient computational complexity when processing the variable SETTINGRE. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Regular Expression Denial of Service (ReDoS)

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the SETTINGRE regular expression in /commands/chat.py. An attacker can cause significant performance...