python3Packages.transformers_4
transformers 4.57.6 · pkgs/development/python-modules/transformers/4.nix
Health
Risk
risk 68 critical
- +60 6 open advisories
- +8 an OSV advisory has a public exploit (CISA)
Version
4.57.6 no newer release known to repology
Channels
Hydra
no finished build of nixpkgs/unstable/python3Packages.transformers_4.x86_64-linux
Advisories
GHSA-29pf-2h5f-8g72 high 7.8 HuggingFace transformers vulnerable to remote code execution (OSV, for this version)
CVE-2026-4372
GHSA-69w3-r845-3855 medium 6.5 public exploit HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class (OSV, for this version)
CVE-2026-1839
GHSA-fgcw-684q-jj6r high 8.0 public exploit huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path (OSV, for this version)
CVE-2026-5241
GHSA-x9r9-c232-4q39 high EPSS 0.1% Hugging Face Transformers downloads custom generation code before trust consent (OSV, for this version)
CVE-2026-80047
GHSA-xrqw-3rrv-vx5w high Transformers save_pretrained path traversal allows arbitrary file writes through chat template names (OSV, for this version)
CVE-2026-9856
PYSEC-2025-217 high 7.8 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vuln (OSV, for this version)
CVE-2025-14929
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 0
None open.
Issues 0
None open.