meddown
On July 7, 2026, multiple OSV advisories (PYSEC-2026-1977 through PYSEC-2026-1988) were published detailing...
On July 7, 2026, multiple OSV advisories (PYSEC-2026-1977 through PYSEC-2026-1988) were published detailing vulnerabilities in the Hugging Face Transformers library.
window 15devidence 87confidence score 100
confidence score
Strong evidence: 3 independent source classes support this read.
100
medium confidence3 independent source classesotherpasses publish gate
signal brief
On July 7, 2026, multiple OSV advisories (PYSEC-2026-1977 through PYSEC-2026-1988) were published detailing vulnerabilities in the Hugging Face Transformers library. These include ReDoS attacks via the DonutProcessor class (CVE-2025-3933), deserialization of untrusted data (CVE-2024-3568), and several other ReDoS and input validation issues (CVE-2025-3262, CVE-2025-6921, CVE-2025-6638, CVE-2024-12720, CVE-2025-5197, CVE-2025-1194, CVE-2025-3264, CVE-2025-3777, CVE-2025-3263, CVE-2025-6051). The transformers library is fundamental to Hugging Face's ecosystem, used for model definition and inference across text, vision, and audio. These vulnerabilities could allow denial of service, arbitrary code execution, or data leakage. A new version 5.13.0 was released on July 3, but the advisories were published on July 7 and may not have been patched yet. This cluster of CVEs may erode developer trust and prompt urgent upgrades, potentially impacting Hugging Face's reputation and usage. The disclosed vulnerabilities were published by OSV, a well-known vulnerability database, lending credibility to the reports.
What the sources said:
- OSV advisory PYSEC-2026-1977: "Transformers is vulnerable to ReDoS attack through its DonutProcessor class"
- OSV advisory PYSEC-2026-1978: "Transformers Deserialization of Untrusted Data vulnerability"
- OSV advisory PYSEC-2026-1979: "Transformers vulnerable to ReDoS attack through its SETTING_RE variable"
- PyPI release transformers 5.13.0 shows the library is actively maintained, but the timing suggests the new release may not address all disclosed flaws.
source data used
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: gguf, qwen2, endpoints_compatible, region:us, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 305 Likes: 0 Tags: hnpu, hexagon, npu, llm, v75, v79, v81, text-generation, base_model:LiquidAI/LFM2.5-230M, base_model:finetune:LiquidAI/LFM2.5-230M, license:other, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen2, text-generation, text-generation-inference, unsloth, conversational, en, base_model:unsloth/Qwen2.5-1.5B-Instruct-bnb-4bit, base_model:finetune:unsloth/Qwen2.5-1.5B-Instruct-bnb-4bit, license:apache-2.0, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 2 Tags: license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, mimo_v2, mimo, nvfp4, mxfp8, modelopt, multimodal, vllm, dflash, custom_code, base_model:XiaomiMiMo/MiMo-V2.5-DFlash, base_model:quantized:XiaomiMiMo/MiMo-V2.5-DFlash”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 40 Likes: 0 Tags: qwen3_next, uqff, mistral.rs, base_model:Qwen/Qwen3-Coder-Next-Base, base_model:quantized:Qwen/Qwen3-Coder-Next-Base, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: llama.cpp, gguf, quantized, llama-cpp, imatrix, llama, portuguese, european-portuguese, kld-measured, conversational, endpoints_compatible, text-generation”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen3, text-generation, Qwen3, GPTQ, W4A16, llm-compressor, conversational, base_model:Qwen/Qwen3-4B-Thinking-2507, base_model:quantized:Qwen/Qwen3-4B-Thinking-2507, text-generation-inference”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen3, text-generation, Qwen3, GPTQ, W4A16, llm-compressor, conversational, base_model:Qwen/Qwen3-4B-Thinking-2507, base_model:quantized:Qwen/Qwen3-4B-Thinking-2507, text-generation-inference”
“Downloads: 0 Likes: 0 Tags: transformers, gguf, en, base_model:SF-Foundation/Gemma4-31B-Finetuned-V2, base_model:quantized:SF-Foundation/Gemma4-31B-Finetuned-V2, endpoints_compatible, region:us, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: pytorch, qwen2, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwonkeau, rwkv7, mesanet, text-generation, conversational, custom_code, base_model:Qwen/Qwen3.5-0.8B, base_model:finetune:Qwen/Qwen3.5-0.8B, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 1080 Likes: 1 Tags: transformers, safetensors, t5, text2text-generation, generated_from_trainer, base_model:google-t5/t5-small, base_model:finetune:google-t5/t5-small, license:apache-2.0, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: gguf, endpoints_compatible, region:us, conversational”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, gguf, en, base_model:Lambent/Iris-12B-v1.3.2, base_model:quantized:Lambent/Iris-12B-v1.3.2, license:apache-2.0, endpoints_compatible, region:us, imatrix, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3_asr, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, gguf, rp, roleplay, creative, experimental, finetune, lora, lfm2.5, writer, en, base_model:Indexnusrefather/LFM-2.5-1.2b-Instruct-roleplay-tuned-v2”
“Downloads: 0 Likes: 0 Tags: tensorboard, safetensors, msp, custom_code, region:us”
“Downloads: 0 Likes: 2 Tags: safetensors, region:us”
“Downloads: 705 Likes: 3 Tags: peft, safetensors, base_model:adapter:Qwen/Qwen3-Coder-30B-A3B-Instruct, lora, transformers, text-generation, conversational, arxiv:1910.09700, base_model:Qwen/Qwen3-Coder-30B-A3B-Instruct, region:us”
“Downloads: 0 Likes: 0 Tags: endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, sam2, mask-generation, segment-anything, car-segmentation, glass-segmentation, automotive, vision, ml-intern, base_model:facebook/sam2.1-hiera-tiny, base_model:finetune:facebook/sam2.1-hiera-tiny”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, qwen3_5, image-text-to-text, conversational, base_model:Qwen/Qwen3.5-9B-Base, base_model:finetune:Qwen/Qwen3.5-9B-Base, license:apache-2.0, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:mit, region:us”
“Downloads: 65 Likes: 0 Tags: task_categories:image-to-text, task_categories:image-text-to-text, task_categories:image-text-to-image, language:ar, license:cc-by-nc-nd-4.0, size_categories:10K<n<100K, format:parquet, modality:image, modality:text, library:datasets, library:dask, library:polars”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: task_categories:robotics, license:apache-2.0, region:us, LeRobot, omx_f, robotis”
“Downloads: 8715 Likes: 2 Tags: region:us”
“Downloads: 1223 Likes: 1 Tags: license:mit, region:us”
“Downloads: 13993 Likes: 23 Tags: region:us”
“Downloads: 503 Likes: 0 Tags: region:us”
“Downloads: 6585 Likes: 3 Tags: language:en, license:other, size_categories:n>1T, region:us, biology, medical, cancer, oncology, single-cell, scRNA-seq, spatial-transcriptomics, tumor-progression”
“Downloads: 4939 Likes: 3 Tags: region:us”
“Downloads: 228 Likes: 0 Tags: task_categories:visual-question-answering, language:zh, license:cc-by-4.0, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 9814 Likes: 3 Tags: region:us”
“Downloads: 1165 Likes: 0 Tags: region:us”
“Downloads: 6089 Likes: 0 Tags: region:us”
“Downloads: 916 Likes: 2 Tags: task_categories:text-generation, task_categories:question-answering, language:en, license:apache-2.0, size_categories:n<1K, region:us, science, research, formal-verification, lean4, benchmark, p2p”
“Downloads: 9041 Likes: 2 Tags: region:us”
“Downloads: 7904 Likes: 3 Tags: region:us”
“Downloads: 3 Likes: 1 Tags: task_categories:object-detection, task_categories:image-segmentation, task_categories:image-text-to-text, task_categories:keypoint-detection, language:en, license:cc-by-nc-4.0, arxiv:2607.06560, region:us, benchmark, vision, detection, segmentation”
“Downloads: 9639 Likes: 2 Tags: region:us”
“Downloads: 545 Likes: 0 Tags: region:us”
“Downloads: 19101 Likes: 5 Tags: license:mit, region:us”
“Downloads: 270 Likes: 0 Tags: region:us”
“Downloads: 9369 Likes: 18 Tags: license:mit, region:us”
“Downloads: 602 Likes: 1 Tags: region:us”
“Transformers: the model-definition framework for state-of-the-art machine learning models in text, vision, audio, and multimodal models, for both inference and training.”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.