On July 7, 2026, a batch of 12 CVEs was published against HuggingFace's Transformers library, including ReDoS,...
On July 7, 2026, a batch of 12 CVEs was published against HuggingFace's Transformers library, including ReDoS, deserialization, and input validation flaws (sources 76–87).
confidence score
Strong evidence: 3 independent source classes support this read.
signal brief
On July 7, 2026, a batch of 12 CVEs was published against HuggingFace's Transformers library, including ReDoS, deserialization, and input validation flaws (sources 76–87). These vulnerabilities, disclosed via OSV, could undermine trust in the library widely used by enterprises. Two days later, HuggingFace CEO Clem Delangue told TechCrunch that companies are moving from proprietary APIs to open-source models, citing cost savings (source 88). While the adoption trend is positive, the security disclosures pose a near-term risk to platform credibility and may slow enterprise onboarding.
What the sources said
- OSV advisories (76–87): "Transformers is vulnerable to ReDoS attack through its DonutProcessor class" and multiple similar CVEs.
- TechCrunch (88): "Open source AI is booming... companies start out on frontier APIs, but as they scale, the costs push them towards open source models."
source data used
“Downloads: 0 Likes: 0 Tags: safetensors, extractor, region:us”
“Downloads: 0 Likes: 0 Tags: ml-intern, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, deepseek_v3, text-generation, conversational, arxiv:1910.09700, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3_vl, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, gpt2, text-generation, generated_from_trainer, trl, sft, base_model:goldfish-models/heb_hebr_100mb, base_model:finetune:goldfish-models/heb_hebr_100mb, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: medical-image-segmentation, skin-lesion-segmentation, semantic-segmentation, semi-supervised-learning, pseudo-labeling, pytorch, resnet34, unet, en, license:mit, region:us”
“Downloads: 0 Likes: 3 Tags: safetensors, not-for-all-audiences, region:us”
“Downloads: 0 Likes: 0 Tags: not-for-all-audiences, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, gemma4, unsloth, quantized, int8, image-text-to-text, conversational, base_model:lokeshe09/gemma-4-26B-A4B-it-SFT_OCRR, base_model:quantized:lokeshe09/gemma-4-26B-A4B-it-SFT_OCRR, license:apache-2.0, 8-bit, compressed-tensors”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, gguf, qwen2, license:apache-2.0, endpoints_compatible, region:us, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 878 Likes: 0 Tags: peft, safetensors, whisper, generated_from_trainer, base_model:ihanif/whisper_small_ps_augmented, base_model:adapter:ihanif/whisper_small_ps_augmented, license:apache-2.0, region:us”
“Downloads: 0 Likes: 1 Tags: pytorch, finance, trading, time-series, transformer, moe, grouped-query-attention, stock-prediction, forex-prediction, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:mit, region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 164 Likes: 0 Tags: transformers, safetensors, qwen2, text-generation, data-lineage, etl, code, information-extraction, lora, text2json, weft, conversational”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: openwakeword, onnx, audio, wake-word, keyword-spotting, voice-assistant, audio-classification, en, license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen2, text-generation, text-generation-inference, unsloth, conversational, en, base_model:unsloth/Qwen2.5-14B-Instruct-bnb-4bit, base_model:finetune:unsloth/Qwen2.5-14B-Instruct-bnb-4bit, license:apache-2.0, endpoints_compatible”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: joblib, region:us”
“Downloads: 0 Likes: 2 Tags: license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3_5_moe, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, gpt2, text-generation, generated_from_trainer, trl, ppo, dataset:stanfordnlp/imdb, arxiv:1909.08593, base_model:openai-community/gpt2, base_model:finetune:openai-community/gpt2, text-generation-inference”
“Downloads: 0 Likes: 0 Tags: onnx, real-estate, bittensor, resi, license:other, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 1957 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 2361 Likes: 2 Tags: size_categories:n<1K, format:text, modality:text, library:datasets, library:mlcroissant, region:us”
“Downloads: 0 Likes: 0 Tags: size_categories:10K<n<100K, format:parquet, modality:image, modality:text, library:datasets, library:dask, library:polars, library:mlcroissant, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 529 Likes: 0 Tags: region:us”
“Downloads: 4 Likes: 0 Tags: size_categories:n<1K, format:json, modality:text, library:datasets, library:pandas, library:polars, library:mlcroissant, region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, size_categories:100M<n<1B, region:us”
“Downloads: 13136 Likes: 3 Tags: region:us”
“Downloads: 12961 Likes: 14 Tags: region:us”
“Downloads: 4697 Likes: 1 Tags: license:apache-2.0, region:us”
“Downloads: 897 Likes: 0 Tags: region:us”
“Downloads: 1362 Likes: 0 Tags: region:us”
“Downloads: 243 Likes: 0 Tags: region:us”
“Downloads: 3 Likes: 0 Tags: region:us”
“Downloads: 533 Likes: 0 Tags: region:us”
“Downloads: 524 Likes: 0 Tags: region:us”
“Downloads: 37 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 11212 Likes: 11 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
“Open source AI is booming, according to Hugging Face CEO Clem Delangue. The company has grown into something like a GitHub for AI in recent years, where AI builders can share and download open models and...”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.