CVE-2025-2099

A vulnerability in the "preprocessstring" function of the "transformers.testingutils" module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service ReDoS attack. The regular expression used to process code blocks in docstrings contains nested quantifiers,...