On 2026-07-07, OSV published 12 new advisories for the Hugging Face Transformers library, including multiple ReDoS...
On 2026-07-07, OSV published 12 new advisories for the Hugging Face Transformers library, including multiple ReDoS (CVE-2025-3933, CVE-2025-3262, CVE-2025-6921, CVE-2025-6638, CVE-2024-12720, CVE-2025-5197, CVE-2025-1194, CVE-2025-3264, CVE-2025-3263, CVE-2025-6051) and one deserialization vulnerability (CVE-2024-3568), plus an input validation issue (CVE-2025-3777).
confidence score
Strong evidence: 3 independent source classes support this read.
signal brief
On 2026-07-07, OSV published 12 new advisories for the Hugging Face Transformers library, including multiple ReDoS (CVE-2025-3933, CVE-2025-3262, CVE-2025-6921, CVE-2025-6638, CVE-2024-12720, CVE-2025-5197, CVE-2025-1194, CVE-2025-3264, CVE-2025-3263, CVE-2025-6051) and one deserialization vulnerability (CVE-2024-3568), plus an input validation issue (CVE-2025-3777). These affect core components: DonutProcessor, AdamWeightDecay optimizer, MarianTokenizer, get_imports(), and get_configuration_file. While the CVEs were assigned in 2024-2025, their publication in a single batch suggests a coordinated disclosure or security audit. The cluster indicates potential systemic issues in the library's regex handling and input sanitization, which could impact the entire ecosystem that relies on Transformers. As Hugging Face maintains the library, this raises developer trust concerns and could slow adoption if users perceive the platform as insecure. No exploit evidence is available yet, but the volume of issues is notable.
What the sources said
- OSV advisory PYSEC-2026-1977: "Transformers is vulnerable to ReDoS attack through its DonutProcessor class" (source).
- OSV advisory PYSEC-2026-1978: "Transformers Deserialization of Untrusted Data vulnerability" (source).
- OSV advisory PYSEC-2026-1987: "Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking" (source).
source data used
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, sft, trl, base_model:meta-llama/Llama-3.2-3B-Instruct, base_model:finetune:meta-llama/Llama-3.2-3B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 8 Tags: endpoints_compatible, region:us”
“Downloads: 0 Likes: 1 Tags: machine-intelligence, SPAD, object-detection, multimodal, profile, Deborah-Akuoko-Minka, Optica-Open, signal-processing, arxiv:2110.04929, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, sft, trl, base_model:meta-llama/Llama-3.2-3B-Instruct, base_model:finetune:meta-llama/Llama-3.2-3B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, hy_v3, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, sft, trl, base_model:meta-llama/Llama-3.2-3B-Instruct, base_model:finetune:meta-llama/Llama-3.2-3B-Instruct, endpoints_compatible, region:us”
“Downloads: 57 Likes: 0 Tags: transformers, safetensors, distilbert, text-classification, generated_from_trainer, base_model:distilbert/distilbert-base-uncased, base_model:finetune:distilbert/distilbert-base-uncased, license:apache-2.0, text-embeddings-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: endpoints_compatible, region:us”
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, trl, sft, base_model:meta-llama/Llama-3.2-3B-Instruct, base_model:finetune:meta-llama/Llama-3.2-3B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 3 Tags: pytorch, finance, trading, time-series, transformer, moe, grouped-query-attention, stock-prediction, forex-prediction, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, trl, sft, base_model:meta-llama/Llama-3.2-3B-Instruct, base_model:finetune:meta-llama/Llama-3.2-3B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 6 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, sft, trl, base_model:meta-llama/Llama-3.2-3B-Instruct, base_model:finetune:meta-llama/Llama-3.2-3B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, distilbert, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: gguf, qwen3_5, llama.cpp, unsloth, vision-language-model, endpoints_compatible, region:us, conversational”
“Downloads: 8 Likes: 0 Tags: transformers, safetensors, mage_vl, image-text-to-text, multimodal, vision-language-model, mage-vl, video-understanding, streaming, conversational, custom_code, license:apache-2.0”
“Downloads: 0 Likes: 0 Tags: pytorch, domain-generalization, disentanglement, dsprites, license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, en, ta, dataset:Helsinki-NLP/opus-100, license:mit, endpoints_compatible, region:us”
“Downloads: 0 Likes: 4 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, gpt, text-generation, pytorch, license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: onnx, gguf, asr, automatic-speech-recognition, speech, audio, en, ru, zh, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, text-generation, pytorch, from-scratch, decoder-only, llama-style, en, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: wan2.2, video-generation, diffusion, camera-control, causal-video, ucpe, image-to-video, base_model:Wan-AI/Wan2.2-TI2V-5B, base_model:finetune:Wan-AI/Wan2.2-TI2V-5B, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 8 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 3119 Likes: 2 Tags: task_categories:text-generation, language:en, license:apache-2.0, size_categories:1K<n<10K, doi:10.57967/hf/9695, region:us, token-compression, context-pruning, kompress, kompress-ultra, agent-loops, opencode”
“Downloads: 3751 Likes: 3 Tags: region:us”
“Downloads: 494 Likes: 1 Tags: region:us”
“Downloads: 7793 Likes: 2 Tags: license:apache-2.0, region:us”
“Downloads: 10648 Likes: 5 Tags: region:us”
“Downloads: 24103 Likes: 9 Tags: region:us”
“Downloads: 1570 Likes: 27 Tags: region:us”
“Downloads: 518 Likes: 0 Tags: region:us”
“Downloads: 2735 Likes: 0 Tags: region:us”
“Downloads: 992 Likes: 2 Tags: task_categories:text-generation, task_categories:question-answering, language:en, license:apache-2.0, size_categories:n<1K, region:us, science, research, formal-verification, lean4, benchmark, p2p”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 3804 Likes: 6 Tags: region:us”
“Downloads: 134 Likes: 0 Tags: task_categories:tabular-classification, task_ids:tabular-single-column-regression, language:en, license:cc-by-4.0, size_categories:1K<n<10K, region:us, deep-learning, training-logs, protein-structure, q8, q3, iitm”
“Downloads: 5415 Likes: 5 Tags: region:us”
“Downloads: 225 Likes: 0 Tags: region:us”
“Downloads: 19709 Likes: 4 Tags: region:us”
“Downloads: 597 Likes: 0 Tags: region:us”
“Downloads: 13121 Likes: 5 Tags: region:us”
“Downloads: 30397 Likes: 5 Tags: region:us”
“Downloads: 7457 Likes: 4 Tags: region:us”
“Downloads: 133 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 253 Likes: 0 Tags: region:us”
“Downloads: 9771 Likes: 5 Tags: license:cc0-1.0, region:us”
“Downloads: 9550 Likes: 10 Tags: license:apache-2.0, region:us”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
“Manifold consensus on 'Will a criminal investigation into OpenAI over the Hugging Face breach be publicly confirmed before 2028?': YES=35.77%”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.