On July 7, 2026, the OSV database published 12 CVEs affecting Hugging Face's Transformers library (sources 77-88).
On July 7, 2026, the OSV database published 12 CVEs affecting Hugging Face's Transformers library (sources 77-88).
confidence score
Strong evidence: 3 independent source classes support this read.
signal brief
On July 7, 2026, the OSV database published 12 CVEs affecting Hugging Face's Transformers library (sources 77-88). These include multiple Regular Expression Denial of Service (ReDoS) vulnerabilities (CVE-2025-3933, CVE-2025-3262, CVE-2025-6921, CVE-2025-6638, CVE-2025-5197, CVE-2025-1194, CVE-2025-3264, CVE-2025-3263) that can cause catastrophic backtracking, a deserialization vulnerability (CVE-2024-3568), and an input validation flaw (CVE-2025-3777). Together, these vulnerabilities expose users to denial-of-service attacks and untrusted data risks, undermining confidence in the library's security. Notably, a new release of Transformers (v5.14.0) was published on PyPI on July 15, 2026 (source 76), likely containing patches. However, the sheer volume of CVEs published in a single batch suggests a systemic security review, and the absence of explicit patch notes in the release metadata may leave users uncertain about which vulnerabilities are addressed. This cluster of advisories is a negative signal for developer trust and ecosystem security.
What the sources said:
- Source 77: 'Transformers is vulnerable to ReDoS attack through its DonutProcessor class.'
- Source 78: 'Transformers Deserialization of Untrusted Data vulnerability.'
- Source 76: 'Transformers 5.14.0 released' (release date July 15, 2026, no explicit security note).
- Source 86: 'Transformers's Improper Input Validation vulnerability can be exploited through username injection.'
source data used
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: onnx, region:us”
“Downloads: 13 Likes: 0 Tags: sentence-transformers, safetensors, siglip, trimmed, zero-shot-image-classification, ben, dataset:lbourdois/fineweb-2-trimming, arxiv:2502.14786, base_model:google/siglip2-base-patch16-512, base_model:quantized:google/siglip2-base-patch16-512, license:apache-2.0, region:”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: keras, region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, bert, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: license:unknown, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, llama, text-generation, facebook, meta, pytorch, llama-3, ertas, bitsandbytes, 4-bit, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, gpt2, text-generation, generated_from_trainer, trl, sft, base_model:fpadovani/dan-latn-10mb-ppt-shuff-dyck-100mb_seed455, base_model:finetune:fpadovani/dan-latn-10mb-ppt-shuff-dyck-100mb_seed455, text-generation-inference, endpoints_compatible,”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 14 Likes: 0 Tags: sentence-transformers, safetensors, siglip, trimmed, zero-shot-image-classification, bel, dataset:lbourdois/fineweb-2-trimming, arxiv:2502.14786, base_model:google/siglip2-base-patch16-512, base_model:quantized:google/siglip2-base-patch16-512, license:apache-2.0, region:”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, t5, text2text-generation, generated_from_trainer, base_model:lecslab/glosslm, base_model:finetune:lecslab/glosslm, license:apache-2.0, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, cma, text-generation, custom_code, causal-lm, small-language-model, generalist, 4k-tokenizer, dataset:HuggingFaceFW/fineweb_edu_100BT-shuffled, dataset:HuggingFaceTB/smollm-corpus, dataset:epfml/FineWeb-HQ”
“Downloads: 0 Likes: 0 Tags: gguf, endpoints_compatible, region:us, imatrix, conversational”
“Downloads: 0 Likes: 4 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: peft, safetensors, base_model:adapter:Qwen/Qwen2.5-Coder-7B-Instruct, lora, transformers, text-generation, conversational, base_model:Qwen/Qwen2.5-Coder-7B-Instruct, license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, bertblocks, region:us”
“Downloads: 6 Likes: 0 Tags: sentence-transformers, safetensors, siglip, trimmed, zero-shot-image-classification, bak, dataset:lbourdois/fineweb-2-trimming, arxiv:2502.14786, base_model:google/siglip2-base-patch16-512, base_model:quantized:google/siglip2-base-patch16-512, license:apache-2.0, region:u”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, bertblocks, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: tensorboard, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 15947 Likes: 4 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: task_categories:text-generation, task_categories:question-answering, language:en, license:cc-by-4.0, size_categories:1K<n<10K, region:us, traces, code, agentic, tool-use, coding-agent, openai”
“Downloads: 10555 Likes: 12 Tags: region:us”
“Downloads: 582 Likes: 2 Tags: region:us”
“Downloads: 938 Likes: 2 Tags: task_categories:text-generation, task_categories:question-answering, language:en, license:apache-2.0, size_categories:n<1K, region:us, science, research, formal-verification, lean4, benchmark, p2p”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 2052 Likes: 1 Tags: region:us”
“Downloads: 2 Likes: 0 Tags: task_categories:text-to-speech, task_categories:audio-to-audio, language:en, language:ja, language:ko, language:zh, license:cc-by-nc-4.0, size_categories:10K<n<100K, region:us”
“Downloads: 68 Likes: 1 Tags: license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: task_categories:other, language:en, region:us, code, bug-fixing, code-review, software-engineering, docker”
“Downloads: 279 Likes: 0 Tags: region:us”
“Downloads: 15132 Likes: 4 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us, trl, trl-logs, completions”
“Downloads: 10656 Likes: 2 Tags: region:us”
“Downloads: 28062 Likes: 22 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:cc-by-nc-nd-4.0, region:us”
“Downloads: 22010 Likes: 0 Tags: license:unknown, region:us”
“Downloads: 0 Likes: 1 Tags: license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Transformers: the model-definition framework for state-of-the-art machine learning models in text, vision, audio, and multimodal models, for both inference and training.”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.