Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Regular Expression Denial Of Service (ReDoS)

🗓️ 24 Oct 2025 04:27:34Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

Transformers expose regular-expression denial of service via MarianTokenizer.remove_language_code due to malformed language code patterns, causing CPU use

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Huntr		Regular expression Denial of Service - ReDoS
14 Jun 202510:45
–huntr
IBM Security Bulletins		Security Bulletin: IBM Maximo Application Suite - Monitor Component uses transformers-4.51.3-py3-none-any.whl which is vulnerable to CVE-2025-6638 and CVE-2025-3777.
29 Dec 202513:47
–ibm
Chainguard		CVE-2025-6638 vulnerabilities
16 Oct 202519:56
–cgr
Circl		CVE-2025-6638
12 Sep 202514:59
–circl
CNNVD		Hugging Face Transformers 安全漏洞
12 Sep 202500:00
–cnnvd
CVE		CVE-2025-6638
12 Sep 202510:46
–cve
Cvelist		CVE-2025-6638 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
12 Sep 202510:46
–cvelist
EUVD		EUVD-2025-29032
3 Oct 202520:07
–euvd
Github Security Blog		Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
12 Sep 202512:30
–github
NVD		CVE-2025-6638
12 Sep 202511:15
–nvd
Rows per page
Vulners
Node
huggingfacetransformersRange2.9.0–4.52.4python
OR
huggingfacetransformersMatch0.1python
OR
huggingfacetransformersMatch2.0.0python
OR
huggingfacetransformersMatch2.1.0python
OR
huggingfacetransformersMatch2.1.1python
OR
huggingfacetransformersMatch2.10.0python
OR
huggingfacetransformersMatch2.11.0python
OR
huggingfacetransformersMatch2.2.0python
OR
huggingfacetransformersMatch2.2.1python
OR
huggingfacetransformersMatch2.2.2python
OR
huggingfacetransformersMatch2.3.0python
OR
huggingfacetransformersMatch2.4.0python
OR
huggingfacetransformersMatch2.4.1python
OR
huggingfacetransformersMatch2.5.0python
OR
huggingfacetransformersMatch2.5.1python
OR
huggingfacetransformersMatch2.6.0python
OR
huggingfacetransformersMatch2.7.0python
OR
huggingfacetransformersMatch2.8.0python
OR
huggingfacetransformersMatch2.9.0python
OR
huggingfacetransformersMatch2.9.1python
OR
huggingfacetransformersMatch3.0.0python
OR
huggingfacetransformersMatch3.0.1python
OR
huggingfacetransformersMatch3.0.2python
OR
huggingfacetransformersMatch3.1.0python
OR
huggingfacetransformersMatch3.2.0python
OR
huggingfacetransformersMatch3.3.0python
OR
huggingfacetransformersMatch3.3.1python
OR
huggingfacetransformersMatch3.4.0python
OR
huggingfacetransformersMatch3.5.0python
OR
huggingfacetransformersMatch3.5.1python
OR
huggingfacetransformersMatch4.0.0python
OR
huggingfacetransformersMatch4.0.0rc1python
OR
huggingfacetransformersMatch4.0.1python
OR
huggingfacetransformersMatch4.1.0python
OR
huggingfacetransformersMatch4.1.1python
OR
huggingfacetransformersMatch4.10.0python
OR
huggingfacetransformersMatch4.10.1python
OR
huggingfacetransformersMatch4.10.2python
OR
huggingfacetransformersMatch4.10.3python
OR
huggingfacetransformersMatch4.11.0python
OR
huggingfacetransformersMatch4.11.1python
OR
huggingfacetransformersMatch4.11.2python
OR
huggingfacetransformersMatch4.11.3python
OR
huggingfacetransformersMatch4.12.0python
OR
huggingfacetransformersMatch4.12.1python
OR
huggingfacetransformersMatch4.12.2python
OR
huggingfacetransformersMatch4.12.3python
OR
huggingfacetransformersMatch4.12.4python
OR
huggingfacetransformersMatch4.12.5python
OR
huggingfacetransformersMatch4.13.0python
OR
huggingfacetransformersMatch4.14.0python
OR
huggingfacetransformersMatch4.14.1python
OR
huggingfacetransformersMatch4.15.0python
OR
huggingfacetransformersMatch4.16.0python
OR
huggingfacetransformersMatch4.16.1python
OR
huggingfacetransformersMatch4.16.2python
OR
huggingfacetransformersMatch4.17.0python
OR
huggingfacetransformersMatch4.18.0python
OR
huggingfacetransformersMatch4.19.0python
OR
huggingfacetransformersMatch4.19.1python
OR
huggingfacetransformersMatch4.19.2python
OR
huggingfacetransformersMatch4.19.3python
OR
huggingfacetransformersMatch4.19.4python
OR
huggingfacetransformersMatch4.2.0python
OR
huggingfacetransformersMatch4.2.1python
OR
huggingfacetransformersMatch4.2.2python
OR
huggingfacetransformersMatch4.20.0python
OR
huggingfacetransformersMatch4.20.1python
OR
huggingfacetransformersMatch4.21.0python
OR
huggingfacetransformersMatch4.21.1python
OR
huggingfacetransformersMatch4.21.2python
OR
huggingfacetransformersMatch4.21.3python
OR
huggingfacetransformersMatch4.22.0python
OR
huggingfacetransformersMatch4.22.1python
OR
huggingfacetransformersMatch4.22.2python
OR
huggingfacetransformersMatch4.23.0python
OR
huggingfacetransformersMatch4.23.1python
OR
huggingfacetransformersMatch4.24.0python
OR
huggingfacetransformersMatch4.25.0python
OR
huggingfacetransformersMatch4.25.1python
OR
huggingfacetransformersMatch4.26.0python
OR
huggingfacetransformersMatch4.26.1python
OR
huggingfacetransformersMatch4.27.0python
OR
huggingfacetransformersMatch4.27.1python
OR
huggingfacetransformersMatch4.27.2python
OR
huggingfacetransformersMatch4.27.3python
OR
huggingfacetransformersMatch4.27.4python
OR
huggingfacetransformersMatch4.28.0python
OR
huggingfacetransformersMatch4.28.1python
OR
huggingfacetransformersMatch4.29.0python
OR
huggingfacetransformersMatch4.29.1python
OR
huggingfacetransformersMatch4.29.2python
OR
huggingfacetransformersMatch4.3.0python
OR
huggingfacetransformersMatch4.3.0rc1python
OR
huggingfacetransformersMatch4.3.1python
OR
huggingfacetransformersMatch4.3.2python
OR
huggingfacetransformersMatch4.3.3python
OR
huggingfacetransformersMatch4.30.0python
OR
huggingfacetransformersMatch4.30.1python
OR
huggingfacetransformersMatch4.30.2python
OR
huggingfacetransformersMatch4.31.0python
OR
huggingfacetransformersMatch4.32.0python
OR
huggingfacetransformersMatch4.32.1python
OR
huggingfacetransformersMatch4.33.0python
OR
huggingfacetransformersMatch4.33.1python
OR
huggingfacetransformersMatch4.33.2python
OR
huggingfacetransformersMatch4.33.3python
OR
huggingfacetransformersMatch4.34.0python
OR
huggingfacetransformersMatch4.34.1python
OR
huggingfacetransformersMatch4.35.0python
OR
huggingfacetransformersMatch4.35.1python
OR
huggingfacetransformersMatch4.35.2python
OR
huggingfacetransformersMatch4.36.0python
OR
huggingfacetransformersMatch4.36.1python
OR
huggingfacetransformersMatch4.36.2python
OR
huggingfacetransformersMatch4.37.0python
OR
huggingfacetransformersMatch4.37.1python
OR
huggingfacetransformersMatch4.37.2python
OR
huggingfacetransformersMatch4.38.0python
OR
huggingfacetransformersMatch4.38.1python
OR
huggingfacetransformersMatch4.38.2python
OR
huggingfacetransformersMatch4.39.0python
OR
huggingfacetransformersMatch4.39.1python
OR
huggingfacetransformersMatch4.39.2python
OR
huggingfacetransformersMatch4.39.3python
OR
huggingfacetransformersMatch4.4.0python
OR
huggingfacetransformersMatch4.4.1python
OR
huggingfacetransformersMatch4.4.2python
OR
huggingfacetransformersMatch4.40.0python
OR
huggingfacetransformersMatch4.40.1python
OR
huggingfacetransformersMatch4.40.2python
OR
huggingfacetransformersMatch4.41.0python
OR
huggingfacetransformersMatch4.41.1python
OR
huggingfacetransformersMatch4.41.2python
OR
huggingfacetransformersMatch4.42.0python
OR
huggingfacetransformersMatch4.42.1python
OR
huggingfacetransformersMatch4.42.2python
OR
huggingfacetransformersMatch4.42.3python
OR
huggingfacetransformersMatch4.42.4python
OR
huggingfacetransformersMatch4.43.0python
OR
huggingfacetransformersMatch4.43.1python
OR
huggingfacetransformersMatch4.43.2python
OR
huggingfacetransformersMatch4.43.3python
OR
huggingfacetransformersMatch4.43.4python
OR
huggingfacetransformersMatch4.44.0python
OR
huggingfacetransformersMatch4.44.1python
OR
huggingfacetransformersMatch4.44.2python
OR
huggingfacetransformersMatch4.45.0python
OR
huggingfacetransformersMatch4.45.1python
OR
huggingfacetransformersMatch4.45.2python
OR
huggingfacetransformersMatch4.46.0python
OR
huggingfacetransformersMatch4.46.1python
OR
huggingfacetransformersMatch4.46.2python
OR
huggingfacetransformersMatch4.46.3python
OR
huggingfacetransformersMatch4.47.0python
OR
huggingfacetransformersMatch4.47.1python
OR
huggingfacetransformersMatch4.48.0python
OR
huggingfacetransformersMatch4.48.1python
OR
huggingfacetransformersMatch4.48.2python
OR
huggingfacetransformersMatch4.48.3python
OR
huggingfacetransformersMatch4.49.0python
OR
huggingfacetransformersMatch4.5.0python
OR
huggingfacetransformersMatch4.5.1python
OR
huggingfacetransformersMatch4.50.0python
OR
huggingfacetransformersMatch4.50.1python
OR
huggingfacetransformersMatch4.50.2python
OR
huggingfacetransformersMatch4.50.3python
OR
huggingfacetransformersMatch4.51.0python
OR
huggingfacetransformersMatch4.51.1python
OR
huggingfacetransformersMatch4.51.2python
OR
huggingfacetransformersMatch4.51.3python
OR
huggingfacetransformersMatch4.52.0python
OR
huggingfacetransformersMatch4.52.1python
OR
huggingfacetransformersMatch4.52.2python
OR
huggingfacetransformersMatch4.52.3python
OR
huggingfacetransformersMatch4.6.0python
OR
huggingfacetransformersMatch4.6.1python
OR
huggingfacetransformersMatch4.7.0python
OR
huggingfacetransformersMatch4.8.0python
OR
huggingfacetransformersMatch4.8.1python
OR
huggingfacetransformersMatch4.8.2python
OR
huggingfacetransformersMatch4.9.0python
OR
huggingfacetransformersMatch4.9.1python
OR
huggingfacetransformersMatch4.9.2python
OR
huggingfacetransformersRange0.1–4.52.4python

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Jun 2026 09:57Current
7.2High risk
Vulners AI Score7.2
CVSS 3.17.5
CVSS 35.3
EPSS0.00038
SSVC
regular expressiondenial of servicemarian tokenizerremove language codemalformed language codes
2