CVE-2025-3933
2 advisories.
PyPI/transformers CVE-2025-3933: medium 5.3, EPSS 0.50%
Transformers is vulnerable to ReDoS attack through its DonutProcessor class
Action: Upgrade transformers to 4.52.1 or later.
pip install transformers==4.52.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.52.1 | - |
Fixed versions
| 4.52.1 |
Sources
- osv: GHSA-37mw-44qp-f5jm
- https://nvd.nist.gov/vuln/detail/CVE-2025-3933
- https://github.com/huggingface/transformers/pull/37788
- https://github.com/huggingface/transformers/commit/ebbe9b12dd75b69f92100d684c47f923ee262a93
- https://github.com/huggingface/transformers
- https://huntr.com/bounties/25282953-5827-4384-bb6f-5790d275721b
CVE-2025-3933 · published · modified · JSON
PyPI/transformers CVE-2025-3933: medium 5.3, EPSS 0.50%
Transformers is vulnerable to ReDoS attack through its DonutProcessor class
Action: Upgrade transformers to 4.52.1 or later.
pip install transformers==4.52.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.52.1 | - |
Fixed versions
| 4.52.1 |
Sources
- osv: PYSEC-2026-1977
- https://nvd.nist.gov/vuln/detail/CVE-2025-3933
- https://github.com/huggingface/transformers/pull/37788
- https://github.com/huggingface/transformers/commit/ebbe9b12dd75b69f92100d684c47f923ee262a93
- https://github.com/huggingface/transformers
- https://huntr.com/bounties/25282953-5827-4384-bb6f-5790d275721b
- https://pypi.org/project/transformers
- https://github.com/advisories/GHSA-37mw-44qp-f5jm
CVE-2025-3933 · published · modified · JSON