Transformers — CVE history (PyPI)
Transformers
14 CVEs affect the Transformers PyPI package (highest CVSS 9.6). Latest disclosed: 2026-06-03. Full CVE history sourced from NVD.
Summary
- Package
Transformers(PyPI)- Total CVEs
14- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.6- Latest disclosed
- 2026-06-03
Recent CVEs (top 14)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5241 | Critical | 9.6 | — | 2026-06-03 | A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. |
CVE-2026-4372 | High | 7.8 | — | 2026-05-24 | A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. |
CVE-2026-1839 | High | 7.8 | — | 2026-04-07 | A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. |
CVE-2025-14930 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2025-14928 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. |
CVE-2025-14924 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2025-14920 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2025-14926 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. |
CVE-2025-14927 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. |
CVE-2025-14921 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2025-14929 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2024-11394 | High | 8.8 | — | 2024-11-22 | Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2024-11393 | High | 8.8 | — | 2024-11-22 | Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2024-11392 | High | 7.5 | — | 2024-11-22 | Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
All-time worst (top 10 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-5241 | Critical | 9.6 | — | 2026-06-03 | A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. |
CVE-2024-11394 | High | 8.8 | — | 2024-11-22 | Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2024-11393 | High | 8.8 | — | 2024-11-22 | Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2026-4372 | High | 7.8 | — | 2026-05-24 | A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. |
CVE-2026-1839 | High | 7.8 | — | 2026-04-07 | A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. |
CVE-2025-14930 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2025-14928 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. |
CVE-2025-14924 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2025-14920 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. |
CVE-2025-14926 | High | 7.8 | — | 2025-12-23 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. |