Hugging Face Transformers

• CVE-2026-80047 High 7.8 Hugging Face Transformers library writes remote code to disk prior to consent check <0.1%
• CVE-2025-14930 High 7.8 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.3%
• CVE-2025-14928 High 7.8 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability 0.3%
• CVE-2025-14924 High 7.8 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.3%
• CVE-2025-14920 High 7.8 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.4%
• CVE-2025-14926 High 7.8 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability 0.3%
• CVE-2025-14927 High 7.8 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability 0.3%
• CVE-2025-14921 High 7.8 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.3%
• CVE-2025-14929 High 7.8 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.4%
• CVE-2024-11394 High 8.8 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 2.7%
• CVE-2024-11393 High 8.8 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability 3.3%
• CVE-2024-11392 High 7.5 Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability 7.7%