CVE-2024-12720
2 advisories.
PyPI/transformers CVE-2024-12720: medium 5.3
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Action: Upgrade transformers to 4.48.0 or later.
pip install transformers==4.48.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.48.0 | - |
Fixed versions
| 4.48.0 |
Sources
- osv: GHSA-6rvg-6v2m-4j46
- https://nvd.nist.gov/vuln/detail/CVE-2024-12720
- https://github.com/huggingface/transformers/commit/deac971c469bcbb182c2e52da0b82fb3bf54cccf
- https://github.com/huggingface/transformers
- https://huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98
CVE-2024-12720 · published · modified · JSON
PyPI/transformers CVE-2024-12720: medium 5.3
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Action: Upgrade transformers to 4.48.0 or later.
pip install transformers==4.48.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.48.0 | - |
Fixed versions
| 4.48.0 |
Sources
- osv: PYSEC-2026-1982
- https://nvd.nist.gov/vuln/detail/CVE-2024-12720
- https://github.com/huggingface/transformers/commit/deac971c469bcbb182c2e52da0b82fb3bf54cccf
- https://github.com/huggingface/transformers
- https://huntr.com/bounties/4bed1214-7835-4252-a853-22bbad891f98
- https://pypi.org/project/transformers
- https://github.com/advisories/GHSA-6rvg-6v2m-4j46
CVE-2024-12720 · published · modified · JSON