TransformersGHSA-phhr-52qp-3mj4
Transformers's Improper Input Validation vulnerability can be exploited through username injection
Low3.5CVE-2025-3777 · Published Jul 7, 2025 · updated Sep 10, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| transformers PyPI | < 4.52.1 | 4.52.1 |
Details and references
Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-20
- Also known as
- CVE-2025-3777, PYSEC-2026-1986
- nvd.nist.gov/vuln/detail/CVE-2025-3777
- github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082
- github.com/huggingface/transformers
- github.com/huggingface/transformers/blame/a7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4/src/transformers/image_utils.py
- huntr.com/bounties/ccba0730-9248-4853-b7ff-5c20e6364f09
More Transformers advisories
All Transformers| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 72025 | Transformers vulnerable to ReDoS attack through its SETTING_RE variable CVE-2025-3262Medium5.3fixed in 4.51.0 | Medium5.3 | 4.51.0 |
| Jul 72025 | Transformers vulnerable to ReDoS attack through its get_imports() function CVE-2025-3264Medium5.3fixed in 4.51.0 | Medium5.3 | 4.51.0 |
| Jul 72025 | Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking CVE-2025-3263Medium5.3fixed in 4.51.0 | Medium5.3 | 4.51.0 |
| Jul 112025 | Transformers is vulnerable to ReDoS attack through its DonutProcessor class CVE-2025-3933Medium5.3fixed in 4.52.1 | Medium5.3 | 4.52.1 |
| Aug 62025 | Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability CVE-2025-5197Medium5.3fixed in 4.53.0 | Medium5.3 | 4.53.0 |
| May 192025 | Hugging Face Transformers Regular Expression Denial of Service CVE-2025-2099Medium5.3fixed in 4.50.0 | Medium5.3 | 4.50.0 |