漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
Vulnerability Description
A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.
CVSS Information
N/A
Vulnerability Type
CWE-1333
Vulnerability Title
transformers 安全漏洞
Vulnerability Description
transformers是Hugging Face开源的一个用于机器学习的应用程序。 transformers v4.48.3版本存在安全漏洞，该漏洞源于preprocess_string函数正则表达式处理不当，可能导致正则表达式拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A