Regular expression Denial of Service - ReDoS

Description A regular expression denial of service ReDoS vulnerability has been identified in the Hugging Face Transformers library's weight conversion utility. The vulnerability exists in the converttfweightnametoptweightname function, which converts TensorFlow weight names to PyTorch format. Th...

ai-simple-engine-runtime-diffusers (0.0.1) potentially affected by CVE-2025-1194 via transformers (0.1.0)

transformers PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ai-simple-engine-runtime-diffusers 0.0.1 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

GHSA-FPWR-67PX-3QHX Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

3m (0.1.0), aaa-ml-datasets-course (1.0.0) +1578 more potentially affected by CVE-2025-1194 via transformers (>=4.0.0rc1, <=4.49.0)

transformers PYPI version =4.0.0rc1, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.0, =0.1.1 - advtok 0.0.2 and more Source cves: CVE-2025-1194 Source advisory: SNYK:PYTHON-TRANSFORMERS-9904725...

adaptnlp (>=0.2.0, <=0.2.2), allennlp (1.2.2) +29 more potentially affected by CVE-2025-1194 via transformers (3.5.1)

transformers PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adaptnlp =0.2.0, =0.0.7, =0.2.0, =0.0.1, =0.0.1, =0.1.8, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-1194 Source advisory:...

nlp2go (>=0.2.5, <=0.4.9), nlprep (>=0.1.56, <=0.1.57) +2 more potentially affected by CVE-2025-1194 via transformers (3.3.0)

transformers PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp2go =0.2.5, =0.1.56, =0.2.11, =0.4.11, =0.5.13 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

allennlp (1.2.0rc1.dev20200923), awca (>=0.0.2, <=0.0.3.2) +9 more potentially affected by CVE-2025-1194 via transformers (3.1.0)

transformers PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp 1.2.0rc1.dev20200923 - awca =0.0.2, =0.2.4, =0.4.8, =1.1.1, =1.1.0.dev202009251125, =2.1.0, =1.0.1, =1.1.0 Source cves:...

allennlp (>=1.1.0rc1.dev20200710, <=1.1.0), allennlp-models (>=1.1.0rc1, <=1.1.0) +26 more potentially affected by CVE-2025-1194 via transformers (3.0.2)

transformers PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.1.0rc1.dev20200710, =1.1.0rc1, =0.7.1, =0.0.1, =0.1.0, =0.4.6, =1.9.0, =0.0.1.dev0, =0.3.1, =0.1.0, =0.1.3 and more Source...

sadedegel (>=0.11.3, <=0.18.3), treform (>=1.1.1, <=1.1.3) potentially affected by CVE-2025-1194 via transformers (3.0.0)

transformers PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - sadedegel =0.11.3, =1.1.1, =1.1.3 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

allennlp (>=1.0.0rc4.dev20200513, <=1.0.0rc6.dev20200601), allennlp-models (>=1.0.0rc4, <=1.0.0rc5) potentially affected by CVE-2025-1194 via transformers (2.9.1)

transformers PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc4.dev20200513, =1.0.0rc4, =1.0.0rc5 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

allennlp (>=0.9.1.dev20200415, <=1.0.0rc4.dev20200511), allennlp-models (>=1.0.0rc2, <=1.0.0rc3) +6 more potentially affected by CVE-2025-1194 via transformers (2.8.0)

transformers PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200415, =1.0.0rc2, =0.1.9, =0.0.2, =0.1.0, =0.3.2 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3Q...

allennlp (>=0.9.1.dev20200404, <=0.9.1.dev20200413), pygaggle (0.0.1) potentially affected by CVE-2025-1194 via transformers (2.7.0)

transformers PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200404, =0.9.1.dev20200413 - pygaggle 0.0.1 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

boolean-question (0.0.3), ernie (0.0.19b0) +6 more potentially affected by CVE-2025-1194 via transformers (2.5.1)

transformers PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - boolean-question 0.0.3 - ernie 0.0.19b0 - methylbert =0.0.2, =0.0.1, =0.0.1a0, =0.1.1, =0.1.19, =0.2.0, =0.2.12 Source cves: CVE-2025-11...

allennlp (>=0.9.1.dev20200220, <=0.9.1.dev20200401), anilv-interpret-text (0.0.1) +9 more potentially affected by CVE-2025-1194 via transformers (2.4.1)

transformers PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200220, =0.5.8, =0.1.2, =0.0.12b0, =1.0.1, =1.0.0.dev202005031000, =0.1.1, =0.2.2, =0.3.0, =0.5.11 Source cves:...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2025-1194 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

allennlp (>=1.0.0rc6.dev20200604, <=1.1.0rc1.dev20200709), allennlp-models (>=1.0.0rc6, <=1.1.0rc1.dev20200709) +29 more potentially affected by CVE-2025-1194 via transformers (2.11.0)

transformers PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =1.0.0rc6.dev20200604, =1.0.0rc6, =0.0.1rc1, =0.1.2, =0.1.3, =0.5.2, =0.1.2, =3.0.1, =0.1.0, =1.8.0, =0.12.2.dev2, =0.12.2.dev...

genienlp (0.3.0), soco-mrc (>=0.0.6, <=0.0.8.1) +1 more potentially affected by CVE-2025-1194 via transformers (2.9.0)

transformers PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - genienlp 0.3.0 - soco-mrc =0.0.6, =1.0.37, =1.0.88 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

smaberta (>=0.0.1, <=0.0.2), trl (0.0.2) potentially affected by CVE-2025-1194 via transformers (2.6.0)

transformers PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - smaberta =0.0.1, =0.0.2 - trl 0.0.2 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...

aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2025-1194 via transformers (2.5.0)

transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2025-1194 Source advisory:...

blanc (>=0.1.0, <=0.1.5) potentially affected by CVE-2025-1194 via transformers (2.4.0)

transformers PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - blanc =0.1.0, =0.1.5 Source cves: CVE-2025-1194 Source advisory: OSV:GHSA-FPWR-67PX-3QHX...