613 matches found
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-2099 DESCRIPTION: A vulnerability in the preprocessstring function of the transformers.testingutils module in...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in transformers-4.48.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-1194 DESCRIPTION: A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers...
Hugging Face Transformers 安全漏洞
Hugging Face Transformers is Hugging Face's open source advanced natural language processing for Jax, PyTorch and TensorFlow. A security vulnerability exists in Hugging Face Transformers version 1.20.0, which stems from the searchitemctrlf function splicing user input directly into XPath...
Exploit for Deserialization of Untrusted Data in Huggingface Transformers
Running - have docker and uv installed, then clone repo and run...
Regular Expression Denial Of Service (ReDoS)
transformers is vulnerable to a Regular Expression Denial Of Service ReDoS. The vulnerability is due to the douseweightdecay method in the AdamWeightDecay optimizer processing user-controlled regular expressions in the includeinweightdecay and excludefromweightdecay lists, which allows an attacke...
The vulnerability of the SubWordJapaneseTokenizer function in the Hugging Face Transformers library, which allows a hacker to trigger a service failure.
The vulnerability of the SubWordJapaneseTokenizer function in the Hugging Face Transformers library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the normalize_numbers() function in the Hugging Face Transformers library, which allows a compromitter to trigger a ReDoS attack.
The vulnerability of the normalizenumbers function in the Hugging Face Transformers library is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a remote attacker to trigger a service denial-of-service attack ReDos...
The vulnerability of the _do_use_weight_decay() function in the Hugging Face Transformers library, which allows a hacker to cause a service failure.
The vulnerability of the douseweightdecay function in the Hugging Face Transformers library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the startswith() function in the Hugging Face Transformers library, which allows a hacker to redirect users to any arbitrary website.
The vulnerability of the startswith function in the Hugging Face Transformers framework is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to redirect users to any desired website...
EUVD-2025-15691
Malicious code in bioql PyPI...
EUVD-2025-29032
Malicious code in bioql PyPI...
EUVD-2025-20214
Malicious code in bioql PyPI...
EUVD-2025-23827
Malicious code in bioql PyPI...
EUVD-2023-0299
Malicious code in bioql PyPI...
EUVD-2025-20217
Malicious code in bioql PyPI...
EUVD-2025-30889
Malicious code in bioql PyPI...
EUVD-2025-15128
Malicious code in bioql PyPI...
EUVD-2025-29125
Malicious code in bioql PyPI...