transformers package vulnerabilities
Advisories affecting the transformers package. A list cannot tell you whether your installed version is affected — the dependency check can.
2 vulnerabilities tracked.
Check which version you are running → — this page lists advisories for the package; only a version check can tell you whether you are affected.
- 9.6 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model…
- 7.8 A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to local disk without…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that transformers is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other packages tracked here
pypdf filelock next langflow PyJWT node-forge github.com/labstack/echo/v5 vllm github.com/labstack/echo/v4 undici nltk react-router virtualenv litellm @highcharts/dashboards authlib adminneo-org/adminneo pyjwt GitPython highcharts org.keycloak:keycloak-services cryptography @highcharts/grid-pro langchain-core