On July 7, 2026, Open Source Vulnerabilities (OSV) published 11 advisories (PYSEC-2026-1977 through PYSEC-2026-1988)...
On July 7, 2026, Open Source Vulnerabilities (OSV) published 11 advisories (PYSEC-2026-1977 through PYSEC-2026-1988) detailing CVEs in the Hugging Face Transformers library.
confidence score
Strong evidence: 3 independent source classes support this read.
signal brief
On July 7, 2026, Open Source Vulnerabilities (OSV) published 11 advisories (PYSEC-2026-1977 through PYSEC-2026-1988) detailing CVEs in the Hugging Face Transformers library. These include Regular Expression Denial of Service (ReDoS) vulnerabilities in components such as DonutProcessor, SETTING_RE, AdamWeightDecay optimizer, MarianTokenizer, and get_imports(), as well as a Deserialization of Untrusted Data vulnerability (CVE-2024-3568) and an Improper Input Validation vulnerability via username injection (CVE-2025-3777). The advisories were issued just four days after the release of Transformers 5.13.0 on July 3, which does not address these vulnerabilities. This cluster of security flaws poses risks to users of the Transformers library, potentially enabling denial of service or arbitrary code execution in affected deployments. Given the central role of Transformers in the Hugging Face ecosystem, these vulnerabilities could undermine user trust and increase operational security burdens for the platform.
What the sources said
- Source 76 (PyPI): "Transformers: the model-definition framework for state-of-the-art machine learning models..." (release of v5.13.0 on July 3).
- Source 77 (OSV): "Transformers is vulnerable to ReDoS attack through its DonutProcessor class" (CVE-2025-3933).
- Source 78 (OSV): "Transformers Deserialization of Untrusted Data vulnerability" (CVE-2024-3568).
- Source 87 (OSV): "Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking" (CVE-2025-3263).
source data used
“Downloads: 0 Likes: 0 Tags: onnx, safetensors, ner, albert, french, token-classification, finetuned, fr, dataset:Jean-Baptiste/wikiner_fr, base_model:albert/albert-base-v2, base_model:finetune:albert/albert-base-v2, license:apache-2.0”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3, region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, gguf, unsloth, arxiv:1910.09700, endpoints_compatible, region:us, conversational”
“Downloads: 439 Likes: 0 Tags: safetensors, speecht5, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, tensorboard, safetensors, whisper, automatic-speech-recognition, generated_from_trainer, dataset:covost2, base_model:openai/whisper-small, base_model:finetune:openai/whisper-small, license:apache-2.0, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, gpt2, text-generation, generated_from_trainer, trl, sft, base_model:goldfish-models/heb_hebr_10mb, base_model:finetune:goldfish-models/heb_hebr_10mb, text-generation-inference, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: qwen3_5_moe, license:apache-2.0, region:us”
“Downloads: 707 Likes: 0 Tags: safetensors, wav2vec2, region:us”
“Downloads: 100 Likes: 0 Tags: safetensors, llava, region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: ultralytics, onnx, object-detection, yolo, license:agpl-3.0, region:us”
“Downloads: 0 Likes: 5 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, sft, trl, base_model:Qwen/Qwen2.5-3B-Instruct, base_model:finetune:Qwen/Qwen2.5-3B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 1 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3, region:us”
“Downloads: 0 Likes: 0 Tags: peft, safetensors, deepshopper, recommendation, fashion, outfit, grpo, lora, en, base_model:Qwen/Qwen3-4B, base_model:adapter:Qwen/Qwen3-4B, license:other”
“Downloads: 0 Likes: 0 Tags: gguf, llama.cpp, quantized, qwen3.5, reasoning, uncensored, long-context, 1M-context, function-calling, multimodal, vision, cybersecurity”
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: keras, region:us”
“Downloads: 61 Likes: 0 Tags: arxiv:2106.09685, region:us”
“Downloads: 55 Likes: 0 Tags: sentence-transformers, safetensors, bert, sentence-similarity, feature-extraction, generated_from_trainer, dataset_size:7278, loss:MultipleNegativesRankingLoss, arxiv:1908.10084, arxiv:1807.03748, base_model:sentence-transformers/LaBSE, base_model:finetune:sentence-trans”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 4 Tags: transformers, tensorboard, safetensors, ida-family, ida-lattice, causal-lm, ai-body, paired-body, governed-memory, recurrent-state, local-attention, cognitive-routing”
“Downloads: 0 Likes: 8 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 4984 Likes: 0 Tags: gguf, long-context, yarn, gemma4, uncensored, mtp, speculative-decoding, vision, llama.cpp, ollama, text-generation, base_model:HauhauCS/Gemma4-12B-QAT-Uncensored-HauhauCS-Balanced”
“Downloads: 0 Likes: 0 Tags: license:unknown, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, qwen3, region:us”
“Downloads: 0 Likes: 0 Tags: peft, safetensors, base_model:adapter:google/gemma-3-1b-it, llama-factory, lora, transformers, text-generation, conversational, arxiv:1910.09700, base_model:google/gemma-3-1b-it, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, text-generation-inference, unsloth, qwen2, trl, en, base_model:unsloth/Qwen2.5-7B-Instruct, base_model:finetune:unsloth/Qwen2.5-7B-Instruct, license:apache-2.0, endpoints_compatible, region:us”
“Downloads: 45 Likes: 0 Tags: pytorch, safetensors, tspulse, time-series, foundation-model, anomaly-detection, classification, energy, smart-meter, load-forecasting, dataset:ai-iot/EnergyBench, base_model:ibm-granite/granite-timeseries-tspulse-r1”
“Downloads: 0 Likes: 1 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: mlx, safetensors, mistral3, image-text-to-text, en, 6-bit, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, text-generation-inference, unsloth, qwen2, trl, en, base_model:unsloth/Qwen2.5-7B-Instruct, base_model:finetune:unsloth/Qwen2.5-7B-Instruct, license:apache-2.0, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: pytorch, svg, vector-graphics, generative, license:mit, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: mlx, safetensors, qwen3_5_moe, oq, quantized, 4-bit, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 11212 Likes: 11 Tags: region:us”
“Downloads: 4513 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: task_categories:feature-extraction, license:mit, size_categories:10K<n<100K, arxiv:2605.10901, region:us, guardrail, safety, representations, zero-knowledge, formal-verification”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 10276 Likes: 3 Tags: region:us”
“Downloads: 29 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 3508 Likes: 12 Tags: license:apache-2.0, region:us”
“Downloads: 11407 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 6332 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 5463 Likes: 7 Tags: license:mit, region:us, feedback, append-only, public-ledger”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 3042 Likes: 2 Tags: task_categories:text-to-image, task_categories:image-to-text, task_categories:image-to-3d, task_categories:image-to-image, size_categories:10M<n<100M, arxiv:2510.08673, region:us, unified multimodal model, camera-centric, generation, understanding, spatial intelligence”
“Downloads: 1449 Likes: 0 Tags: region:us”
“Downloads: 1916 Likes: 5 Tags: license:mit, region:us”
“Downloads: 1866 Likes: 0 Tags: region:us”
“Downloads: 2341735 Likes: 63 Tags: task_categories:text-classification, language:ja, license:mit, region:us”
“Downloads: 11 Likes: 1 Tags: license:cc-by-4.0, region:us, sleep, polysomnography, eeg, osa, obstructive-sleep-apnea, edf, rml”
“Downloads: 3017 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 2493 Likes: 0 Tags: region:us”
“Downloads: 12980 Likes: 3 Tags: region:us”
“Transformers: the model-definition framework for state-of-the-art machine learning models in text, vision, audio, and multimodal models, for both inference and training.”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.