CVE-2025-1194Medium· 4.3▾ SunlitTransformers Regular Expression Denial of Service (ReDoS) vulnerability
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.4%
0.4% → 0.5%
A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_gpt_neox_japanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.48.1 (latest).
transformers < 4.50.0Upgrade to a patched release:
transformers 4.50.0Connected by shared product, vendor, weakness, or advisory.
CVE-2024-11393High· 8.8Deserialization of Untrusted Data in Hugging Face Transformers
CVE-2024-11392High· 7.5Deserialization of Untrusted Data in Hugging Face Transformers
CVE-2024-11394High· 8.8Deserialization of Untrusted Data in Hugging Face Transformers
CVE-2026-9856High· 7.1A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal
CVE-2026-1839Medium· 6.5HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
CVE-2025-6051Medium· 5.3Hugging Face Transformers library has Regular Expression Denial of Service