Regular Expression Denial Of Service (ReDoS)

transformers is vulnerable to a Regular Expression Denial Of Service ReDoS. The vulnerability is due to the douseweightdecay method in the AdamWeightDecay optimizer processing user-controlled regular expressions in the includeinweightdecay and excludefromweightdecay lists, which allows an attacke...

EUVD-2018-2563

Malware in sbrugna...

EUVD-2020-0192

Malware in sbrugna...

EUVD-2018-11270

Malware in sbrugna...

EUVD-2006-1256

Malware in sbrugna...

EUVD-2017-3191

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987041)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987041 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a use-after-fr...

EUVD-2023-0933

Malicious code in bioql PyPI...

EUVD-2023-41289

Malicious code in bioql PyPI...

EUVD-2022-49576

Malicious code in bioql PyPI...

EUVD-2025-30889

Malicious code in bioql PyPI...

EUVD-2025-11671

Malicious code in bioql PyPI...

EUVD-2022-34117

Malicious code in bioql PyPI...

EUVD-2022-34112

Malicious code in bioql PyPI...

EUVD-2022-27408

Malicious code in bioql PyPI...

EUVD-2022-6940

Malicious code in bioql PyPI...

Quant Fever, Reasoning Blackholes, Schrodinger'S Compliance, and More: Probing GPT-OSS-20B

OpenAI's GPT-OSS family provides open-weight language models with explicit chain-of-thought CoT reasoning and a Harmony prompt format. We summarize an extensive security evaluation of GPT-OSS-20B that probes the model's behavior under different adversarial conditions. Using the Jailbreak Oracle J...

SUSE CVE-2025-6921

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

Regular Expression Denial of Service (ReDoS)

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the douseweightdecay function. An attacker can cause excessive CPU consumption and make services...

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...