On July 7, 2026, 11 CVEs were published against the Hugging Face Transformers library, including multiple Regular...
On July 7, 2026, 11 CVEs were published against the Hugging Face Transformers library, including multiple Regular Expression Denial of Service (ReDoS) vulnerabilities and a deserialization issue.
confidence score
Strong evidence: 3 independent source classes support this read.
signal brief
On July 7, 2026, 11 CVEs were published against the Hugging Face Transformers library, including multiple Regular Expression Denial of Service (ReDoS) vulnerabilities and a deserialization issue. These advisories (e.g., CVE-2025-3933, CVE-2024-3568, CVE-2025-3262) affect core components including DonutProcessor, tokenizers, and optimizer classes. The cluster of vulnerabilities suggests a systemic security weakness in the library's input validation, which could be exploited to cause service disruption or remote code execution in downstream AI applications. A new version 5.14.1 was released on July 16 (PyPI), likely containing fixes, but adoption takes time. Enterprises using Transformers for inference pipelines face increased operational risk until patching is complete.
What the sources said:
- 'Transformers is vulnerable to ReDoS attack through its DonutProcessor class' (PYSEC-2026-1977).
- 'Transformers Deserialization of Untrusted Data vulnerability' (PYSEC-2026-1978).
- 'Hugging Face Transformers vulnerable to ReDoS through its MarianTokenizer' (PYSEC-2026-1981).
- 'Hugging Face Transformers library has Regular Expression Denial of Service' (PYSEC-2026-1988).
source data used
“Downloads: 0 Likes: 0 Tags: deepfake-detection, image-classification, efficientnet, discrete-wavelet-transform, cbam-attention, tensorflow, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, gemma4, image-text-to-text, generated_from_trainer, trl, unsloth, orpo, conversational, arxiv:2403.07691, base_model:unsloth/gemma-4-26B-A4B-it, base_model:finetune:unsloth/gemma-4-26B-A4B-it”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, trl, sft, base_model:microsoft/Phi-3-mini-4k-instruct, base_model:finetune:microsoft/Phi-3-mini-4k-instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 1 Tags: mlx, safetensors, gemma4_unified, mlx-vlm, apple-silicon, gemma4, qat, vision-language-model, conversational, quantized, mixed-precision, optiq”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 1 Tags: transformers, safetensors, llama, text-generation, generated_from_trainer, trl, grpo, arxiv:2402.03300, base_model:sullivan1502/base-sft, base_model:finetune:sullivan1502/base-sft, text-generation-inference, endpoints_compatible”
“Downloads: 0 Likes: 1 Tags: transformers, safetensors, gpt2, text-generation, generated_from_trainer, trl, sft, base_model:fpadovani/eus-latn-100mb-ppt-Dp-100mb_seed455, base_model:finetune:fpadovani/eus-latn-100mb-ppt-Dp-100mb_seed455, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 10 Likes: 0 Tags: nemo, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen2, text-generation, text-generation-inference, unsloth, conversational, en, base_model:keperluan/qwen2.5-1.5b-legal-sft, base_model:finetune:keperluan/qwen2.5-1.5b-legal-sft, license:apache-2.0, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: safetensors, base_model:stable-diffusion-v1-5/stable-diffusion-v1-5, base_model:finetune:stable-diffusion-v1-5/stable-diffusion-v1-5, region:us”
“Downloads: 0 Likes: 1 Tags: mlx, safetensors, qwen3_5_moe, mlx-vlm, apple-silicon, qwen3.6, mixture-of-experts, vision-language-model, conversational, quantized, mixed-precision, optiq”
“Downloads: 0 Likes: 6 Tags: endpoints_compatible, region:us”
“Downloads: 575 Likes: 0 Tags: safetensors, llama, compressed-tensors, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 2767 Likes: 0 Tags: furiosa-llm, qwen3, furiosa-ai, qwen, qwen-3, fp8, text-generation, conversational, en, base_model:Qwen/Qwen3-32B-FP8, base_model:quantized:Qwen/Qwen3-32B-FP8, license:apache-2.0”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: peft, safetensors, base_model:adapter:Jackrong/Qwopus3.5-4B-v3, lora, sft, transformers, trl, unsloth, text-generation, conversational, arxiv:1910.09700, base_model:Jackrong/Qwopus3.5-4B-v3”
“Downloads: 0 Likes: 0 Tags: mlx, safetensors, qwen3_5, mlx-vlm, apple-silicon, qwen3.6, vision-language-model, conversational, quantized, mixed-precision, optiq, 4-bit”
“Downloads: 0 Likes: 1 Tags: transformers, safetensors, generated_from_trainer, trl, sft, unsloth, base_model:unsloth/Qwen2.5-7B-Instruct-bnb-4bit, base_model:finetune:unsloth/Qwen2.5-7B-Instruct-bnb-4bit, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 8 Likes: 0 Tags: sentence-transformers, safetensors, siglip, trimmed, zero-shot-image-classification, bel, dataset:lbourdois/fineweb-2-trimming, arxiv:2502.14786, base_model:google/siglip2-giant-opt-patch16-384, base_model:quantized:google/siglip2-giant-opt-patch16-384, license:apache-2.0”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 580 Likes: 0 Tags: safetensors, llama, 8-bit, compressed-tensors, region:us”
“Downloads: 0 Likes: 1 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: gguf, endpoints_compatible, region:us, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen3_5, image-text-to-text, unsloth, fine tune, heretic, uncensored, abliterated, multi-stage tuned., all use cases, coder”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 3 Tags: transformers, safetensors, generated_from_trainer, trl, sft, base_model:Qwen/Qwen2.5-1.5B-Instruct, base_model:finetune:Qwen/Qwen2.5-1.5B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: mlx, safetensors, qwen3_5, mlx-vlm, apple-silicon, qwen3.5, vision-language-model, conversational, quantized, mixed-precision, optiq, 4-bit”
“Downloads: 0 Likes: 4 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen2, text-generation, conversational, arxiv:1910.09700, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 3 Tags: pytorch, finance, trading, time-series, transformer, moe, grouped-query-attention, stock-prediction, forex-prediction, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, arxiv:1910.09700, endpoints_compatible, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 9 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 35 Likes: 2 Tags: transformers, safetensors, chess, move-prediction, neural-network, deep-learning, skill-conditioning, player-modeling, en, dataset:lichess, license:mit, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3_5, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, matrimonial, matchmaking, india, qwen2.5, qlora, en, hi, base_model:Qwen/Qwen2.5-7B-Instruct, base_model:finetune:Qwen/Qwen2.5-7B-Instruct, license:cc-by-nc-4.0, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 8 Tags: safetensors, region:us”
“Downloads: 5979 Likes: 0 Tags: region:us”
“Downloads: 5158 Likes: 1 Tags: task_categories:visual-question-answering, task_categories:video-text-to-text, language:en, license:apache-2.0, size_categories:100K<n<1M, arxiv:2606.05259, region:us, video-reasoning, knowledge-reasoning, chain-of-thought”
“Downloads: 18974 Likes: 6 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 444 Likes: 1 Tags: region:us”
“Downloads: 12290 Likes: 8 Tags: region:us”
“Downloads: 31484 Likes: 26 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 1076 Likes: 2 Tags: region:us”
“Downloads: 1332 Likes: 27 Tags: region:us”
“Downloads: 557 Likes: 3 Tags: region:us”
“Downloads: 235 Likes: 0 Tags: region:us”
“Downloads: 13766 Likes: 19 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 11753 Likes: 16 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 6079 Likes: 6 Tags: license:mit, region:us”
“Downloads: 376 Likes: 3 Tags: region:us”
“Downloads: 2668 Likes: 0 Tags: language:en, language:zh, license:cc-by-4.0, size_categories:n<1K, region:us, mechanistic-interpretability, moral-reasoning, llm, persona-vectors, ethics, moral-foundations-theory”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 2289 Likes: 3 Tags: license:unknown, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 5947 Likes: 4 Tags: region:us”
“Transformers: the model-definition framework for state-of-the-art machine learning models in text, vision, audio, and multimodal models, for both inference and training.”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.