CVE-2025-3777
2 advisories.
PyPI/transformers CVE-2025-3777: low 3.5, EPSS 0.41%
Transformers's Improper Input Validation vulnerability can be exploited through username injection
Action: Upgrade transformers to 4.52.1 or later.
pip install transformers==4.52.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.52.1 | - |
Fixed versions
| 4.52.1 |
Sources
- osv: GHSA-phhr-52qp-3mj4
- https://nvd.nist.gov/vuln/detail/CVE-2025-3777
- https://github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082
- https://github.com/huggingface/transformers
- https://github.com/huggingface/transformers/blame/a7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4/src/transformers/image_utils.py
- https://huntr.com/bounties/ccba0730-9248-4853-b7ff-5c20e6364f09
CVE-2025-3777 · published · modified · JSON
PyPI/transformers CVE-2025-3777: low 3.5, EPSS 0.41%
Transformers's Improper Input Validation vulnerability can be exploited through username injection
Action: Upgrade transformers to 4.52.1 or later.
pip install transformers==4.52.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.52.1 | - |
Fixed versions
| 4.52.1 |
Sources
- osv: PYSEC-2026-1986
- https://nvd.nist.gov/vuln/detail/CVE-2025-3777
- https://github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082
- https://github.com/huggingface/transformers
- https://github.com/huggingface/transformers/blame/a7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4/src/transformers/image_utils.py
- https://huntr.com/bounties/ccba0730-9248-4853-b7ff-5c20e6364f09
- https://pypi.org/project/transformers
- https://github.com/advisories/GHSA-phhr-52qp-3mj4
CVE-2025-3777 · published · modified · JSON