Skip to content
TransformersGHSA-jjph-296x-mrcr

Transformers vulnerable to ReDoS attack through its get_imports() function

Medium5.3CVE-2025-3264 · Published Jul 7, 2025 · updated Jul 7, 2026

GitHub advisory

Affected versions

PackageAffectedFixed in
transformers
PyPI
< 4.51.04.51.0
Details and references

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular expression pattern `\s*try\s*:.*?except.*?:` used to filter out try/except blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.

CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Severity from
GitHub (reviewed advisory)
Weakness
CWE-1333
Also known as
CVE-2025-3264, PYSEC-2026-1985

More Transformers advisories

All Transformers
DateAdvisory
Jul 72025Transformers vulnerable to ReDoS attack through its SETTING_RE variable
CVE-2025-3262Medium5.3fixed in 4.51.0
Jul 72025Transformers's Improper Input Validation vulnerability can be exploited through username injection
CVE-2025-3777Low3.5fixed in 4.52.1
Jul 72025Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
CVE-2025-3263Medium5.3fixed in 4.51.0
Jul 112025Transformers is vulnerable to ReDoS attack through its DonutProcessor class
CVE-2025-3933Medium5.3fixed in 4.52.1
Aug 62025Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
CVE-2025-5197Medium5.3fixed in 4.53.0
May 192025Hugging Face Transformers Regular Expression Denial of Service
CVE-2025-2099Medium5.3fixed in 4.50.0

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.