Średnia

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

Ujawniono: 11.07.2025
Aktualizacja: 11.10.2026 15:17

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json() method. This vulnerability affects versions 4.51.3 and earlier, and is fixed in version 4.52.1. The issue arises from the regex pattern <s_(.*?)> which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting document processing tasks using the Donut model.

Czego dotyczy

Kliknij technologię, aby zobaczyć wszystkie dotyczące jej podatności.

Platforma	Paczka	Podatne wersje	Poprawka w wersji
Python (PyPI)	transformers	< 4.52.1	4.52.1

Odnośniki

Ocena CVSS 5.3/10

Wektor CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Słabość (CWE): CWE-1333
Platforma: Python (PyPI)
Paczka: transformers
Ujawniono: 11.07.2025
Aktualizacja: 11.10.2026 15:17

Źródła i licencje

OSV / GitHub Advisory Database - PYSEC-2026-1977 - PyPA Advisory Database; CC BY 4.0

OSV / GitHub Advisory Database - GHSA-37mw-44qp-f5jm - CC BY 4.0

Historia podatności: transformers

Wszystkie opisane podatności tej paczki (Python (PyPI)), od najnowszej. Widać, czy to jednorazowa wpadka, czy paczka, której trzeba pilnować.

Wszystkie (32) w archiwum

Wszystkich wpisów: 32
Pierwsza → ostatnia: 05.2023 09.2026
Bez poprawki: 9
Wykorzystywana w atakach: 0

Rozkład istotności

Wysoka 18
Średnia 12
Niska 2

Ujawnienia w latach

2023: 3
2024: 4
2025: 20
2026: 5

01.09.2026

Hugging Face Transformers downloads custom generation code before trust consent

Wysoka · 7.8 CVE-2026-80047 >= 4.49.0, <= 5.8.1 brak poprawki
02.08.2026

Transformers save_pretrained path traversal allows arbitrary file writes through chat template names

Wysoka · 7.1 CVE-2026-9856 < 5.10.0 5.10.0
03.06.2026

huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path

Wysoka · 8.0 CVE-2026-5241 < 5.5.0 5.5.0
24.05.2026

HuggingFace transformers vulnerable to remote code execution

Wysoka · 7.8 CVE-2026-4372 < 5.3.0 5.3.0
23.12.2025

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of

Wysoka · 7.8 CVE-2025-14930 <= 4.57.1 brak poprawki
23.12.2025

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hu

Wysoka · 7.8 CVE-2025-14928 <= 4.57.0 brak poprawki
23.12.2025

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af

Wysoka · 7.8 CVE-2025-14929 <= 5.0.0-rc0 brak poprawki
23.12.2025

Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Huggi

Wysoka · 7.8 CVE-2025-14926 <= 4.57.0 brak poprawki
23.12.2025

Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hug

Wysoka · 7.8 CVE-2025-14927 <= 4.57.0 brak poprawki
23.12.2025

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal

Wysoka · 7.8 CVE-2025-14920 <= 4.54.1 brak poprawki
23.12.2025

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i

Wysoka · 7.8 CVE-2025-14921 <= 4.54.1 brak poprawki
23.12.2025

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa

Wysoka · 7.8 CVE-2025-14924 <= 4.55.0 brak poprawki
11.07.2025

Transformers is vulnerable to ReDoS attack through its DonutProcessor class ten wpis

Średnia · 5.3 CVE-2025-3933 < 4.52.1 4.52.1
19.05.2025

A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) a

Wysoka · 7.5 CVE-2025-2099 < 4.49.0 4.49.0
22.11.2024

Deserialization of Untrusted Data in Hugging Face Transformers

Wysoka · 8.8 CVE-2024-11394 < 4.48.0 4.48.0
22.11.2024

Deserialization of Untrusted Data in Hugging Face Transformers

Wysoka · 8.8 CVE-2024-11393 < 4.48.0 4.48.0
22.11.2024

Deserialization of Untrusted Data in Hugging Face Transformers

Wysoka · 7.5 CVE-2024-11392 < 4.48.0 4.48.0
20.12.2023

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

Wysoka · 7.8 CVE-2023-7018 < 4.36.0 4.36.0
19.12.2023

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

Wysoka · 8.8 CVE-2023-6730 < 4.36.0 4.36.0

Dowiedz się, które podatności dotyczą Twojej aplikacji

Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.

Podłącz swoją aplikację