On July 7, 2026, 12 distinct CVEs were published in the OSV database affecting the Hugging Face Transformers library,...
On July 7, 2026, 12 distinct CVEs were published in the OSV database affecting the Hugging Face Transformers library, including multiple ReDoS vulnerabilities, a deserialization flaw, and an input validation issue.
confidence score
Strong evidence: 2 independent source classes support this read.
signal brief
On July 7, 2026, 12 distinct CVEs were published in the OSV database affecting the Hugging Face Transformers library, including multiple ReDoS vulnerabilities, a deserialization flaw, and an input validation issue. These advisories (PYSEC-2026-1977 through 1988) cover weaknesses in components like DonutProcessor, AdamWeightDecay optimizer, MarianTokenizer, and get_imports() function. The concentrated release of vulnerabilities suggests a security audit or increased scrutiny, potentially eroding developer trust in the core library maintained by Hugging Face.
What the sources said:
- 'Transformers is vulnerable to ReDoS attack through its DonutProcessor class' (OSV advisory PYSEC-2026-1977)
- 'Transformers Deserialization of Untrusted Data vulnerability' (PYSEC-2026-1978)
- 'Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer' (PYSEC-2026-1980)
- 'Transformers's Improper Input Validation vulnerability can be exploited through username injection' (PYSEC-2026-1986)
These published flaws may prompt users to delay upgrades or seek alternatives, impacting Hugging Face's platform stickiness and ecosystem trust.
source data used
“Downloads: 6348 Likes: 0 Tags: gguf, base_model:Blackfrost-AI/GLM-5.2-ABLITERATED-BF16, base_model:quantized:Blackfrost-AI/GLM-5.2-ABLITERATED-BF16, license:other, endpoints_compatible, region:us, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, audio-processing, text-to-video, text-generation, compilation, license:other, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 85 Likes: 0 Tags: safetensors, gpt2, region:us”
“Downloads: 0 Likes: 0 Tags: diffusers, safetensors, 4-bit, bitsandbytes, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen3_moe, text-generation, Neura Tech AI, Neuron, instruct, llm, transformer, mixture-of-experts, moe, multilingual”
“Downloads: 0 Likes: 0 Tags: pytorch, region:us”
“Downloads: 613 Likes: 0 Tags: safetensors, text-generation, pytorch, from-scratch, decoder-only, llama-style, en, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 107 Likes: 0 Tags: transformers, safetensors, gpt2, text-generation, arxiv:1910.09700, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, llama, iapyx, korean, function-calling, risk-analysis, ko, base_model:space1637/iapyx-midm-2.0-mini-sft, base_model:finetune:space1637/iapyx-midm-2.0-mini-sft, license:other, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, exaone4, iapyx, korean, function-calling, risk-analysis, ko, base_model:space1637/iapyx-exaone-4.0-1.2b-sft, base_model:finetune:space1637/iapyx-exaone-4.0-1.2b-sft, license:other, region:us”
“Downloads: 36 Likes: 1 Tags: safetensors, iapyx, korean, function-calling, risk-analysis, ko, base_model:upstage/solar-pro-preview-instruct, base_model:finetune:upstage/solar-pro-preview-instruct, license:other, region:us”
“Downloads: 0 Likes: 0 Tags: text-to-audio, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, exaone, iapyx, korean, function-calling, risk-analysis, custom_code, ko, base_model:LGAI-EXAONE/EXAONE-Deep-7.8B, base_model:finetune:LGAI-EXAONE/EXAONE-Deep-7.8B, license:other, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, exaone, iapyx, korean, function-calling, risk-analysis, custom_code, ko, base_model:LGAI-EXAONE/EXAONE-Deep-2.4B, base_model:finetune:LGAI-EXAONE/EXAONE-Deep-2.4B, license:other, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: diffusers, safetensors, 4-bit, bitsandbytes, region:us”
“Downloads: 1046 Likes: 0 Tags: safetensors, hy_v3, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: tensorboard, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 24 Likes: 0 Tags: safetensors, mt5, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 83 Likes: 0 Tags: safetensors, gpt2, region:us”
“Downloads: 0 Likes: 0 Tags: llama-cpp, gguf, gemma4, gemma4-12b, qat, quantized, multimodal, any-to-any, multilingual, arxiv:2607.02770, base_model:google/gemma-4-12B-it, base_model:quantized:google/gemma-4-12B-it”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 8 Likes: 0 Tags: llama.cpp, gguf, agent, deep-research, reasoning, tool-use, long-context, qwen3.5, mixture-of-experts, text-generation, en, base_model:Qwen/Qwen3.5-122B-A10B”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: onnx, region:us”
“Downloads: 0 Likes: 0 Tags: lerobot, safetensors, smolvla, robotics, dataset:hanapasta/pick_refuse_hazard_240, arxiv:2506.01844, base_model:lerobot/smolvla_base, base_model:finetune:lerobot/smolvla_base, license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: image-editing, lora, comfyui, krea-2, base_model:krea/Krea-2-Raw, base_model:adapter:krea/Krea-2-Raw, license:other, region:us”
“Downloads: 77 Likes: 0 Tags: safetensors, gpt2, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3_5_moe, region:us”
“Downloads: 0 Likes: 0 Tags: onnx, license:apache-2.0, region:us”
“Downloads: 0 Likes: 9 Tags: endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: stable-baselines3, LunarLander-v3, deep-reinforcement-learning, reinforcement-learning, model-index, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3_5_moe, region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 27537 Likes: 10 Tags: region:us”
“Downloads: 3749 Likes: 3 Tags: license:apache-2.0, region:us”
“Downloads: 1635 Likes: 0 Tags: task_categories:time-series-forecasting, task_categories:reinforcement-learning, license:other, region:us, polymarket, prediction-markets, order-book, market-microstructure”
“Downloads: 1139 Likes: 1 Tags: language:en, license:cc-by-4.0, region:us, prediction-markets, polymarket, finance, time-series, order-books”
“Downloads: 121 Likes: 0 Tags: task_categories:text-generation, language:en, license:odc-by, region:us”
“Downloads: 4407 Likes: 6 Tags: region:us”
“Downloads: 13216 Likes: 5 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 25079 Likes: 9 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 21 Likes: 0 Tags: license:other, region:us”
“Downloads: 10168 Likes: 5 Tags: region:us”
“Downloads: 6137 Likes: 5 Tags: region:us”
“Downloads: 1561 Likes: 2 Tags: task_categories:text-generation, language:en, license:apache-2.0, size_categories:1K<n<10K, doi:10.57967/hf/9695, region:us, token-compression, context-pruning, kompress, kompress-ultra, agent-loops, opencode”
“Downloads: 494 Likes: 1 Tags: license:openrail, region:us”
“Downloads: 5651 Likes: 2 Tags: license:mit, region:us”
“Downloads: 17 Likes: 0 Tags: region:us”
“Downloads: 204 Likes: 0 Tags: task_categories:text-generation, language:en, license:odc-by, region:us”
“Downloads: 3341 Likes: 1 Tags: region:us”
“Downloads: 32563 Likes: 5 Tags: region:us”
“Downloads: 705 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 48 Likes: 0 Tags: region:us”
“Downloads: 2429 Likes: 1 Tags: region:us”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.