EUVD-2025-15691

Malicious code in bioql PyPI...

EUVD-2025-20214

Malicious code in bioql PyPI...

EUVD-2025-29032

Malicious code in bioql PyPI...

EUVD-2025-23827

Malicious code in bioql PyPI...

EUVD-2023-0299

Malicious code in bioql PyPI...

EUVD-2025-20215

Malicious code in bioql PyPI...

EUVD-2025-20217

Malicious code in bioql PyPI...

EUVD-2025-30889

Malicious code in bioql PyPI...

EUVD-2025-29125

Malicious code in bioql PyPI...

EUVD-2025-15128

Malicious code in bioql PyPI...

EUVD-2023-0300

Malicious code in bioql PyPI...

EUVD-2024-1077

Malicious code in bioql PyPI...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +25575 more potentially affected by CVE-2025-46148 via torch (>=1.0.0 <=2.6.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 - a1facts =0.2.6 and more Source cves: CVE-2025-46148 Source advisory: OSV:PYSEC-2025-198...

Vision Transformers: the Threat of Realistic Adversarial Patches

The increasing reliance on machine learning systems has made their security a critical concern. Evasion attacks enable adversaries to manipulate the decision-making processes of AI systems, potentially causing security breaches or misclassification of targets. Vision Transformers ViTs have gained...

SUSE CVE-2025-6921

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1759 more potentially affected by CVE-2025-6921 via transformers (>=4.0.0 <=4.52.4)

transformers PYPI version =4.0.0, =0.0.4.80, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.2 and more Source cves: CVE-2025-6921 Source advisory: SNYK:PYTHON-TRANSFORMERS-13018959...

GHSA-4W7R-H757-3R74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

Regular Expression Denial of Service (ReDoS)

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the douseweightdecay function. An attacker can cause excessive CPU consumption and make services...

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1855 more potentially affected by CVE-2025-6921 via transformers (>=2.10.0 <=4.52.4)

transformers PYPI version =2.10.0, =0.0.4.80, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.2.11 and more Source cves: CVE-2025-6921 Source advisory: OSV:GHSA-4W7R-H757-3R74...