tocsin

CVE-2025-14929

1 advisory.

PyPI/transformers CVE-2025-14929: high 7.8

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-5.0.0-rc0

Fixed versions

No fixed version in the source.

Sources

CVE-2025-14929 · published · modified · JSON