Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Transformers — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Transformers, with AI-generated Chinese analysis, references, and POCs.

Vendor: Hugging Face

CVE ID Title CVSS Severity Published
CVE-2026-80047 Hugging Face Transformers library writes remote code to disk prior to consent check - - 2026-09-01
CVE-2026-75104 Hugging Face Transformers Path Traversal via Checkpoint Index CWE-22 5.5 Medium 2026-08-17
CVE-2025-14930 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 7.8AI High AI 2025-12-23
CVE-2025-14928 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability CWE-94 8.8AI High AI 2025-12-23
CVE-2025-14924 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 7.8AI High AI 2025-12-23
CVE-2025-14920 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 7.8AI High AI 2025-12-23
CVE-2025-14926 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability CWE-94 8.8AI High AI 2025-12-23
CVE-2025-14927 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability CWE-94 8.8AI High AI 2025-12-23
CVE-2025-14921 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 7.8AI High AI 2025-12-23
CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8AI High AI 2025-12-23
CVE-2024-11394 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 7.8 - 2024-11-22
CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 7.8 - 2024-11-22
CVE-2024-11392 Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 7.8 - 2024-11-22

All 13 known CVE vulnerabilities affecting Transformers with full Chinese analysis, references, and POCs where available.