{"action":"Upgrade transformers to 4.53.0 or later.","affected":[{"fixed":"4.53.0","introduced":"0"}],"component":"transformers","cve_ids":["CVE-2025-6051"],"ecosystem":"PyPI","epss":0.00382,"exploited":false,"fixed_versions":["4.53.0"],"ghsa_id":"GHSA-rcv9-qm8p-9p6j","id":"tcs_01M5KFXS27DGWPNFRXC9TY898V","modified_at":"2026-09-10T03:50:28.694224028Z","published_at":"2025-09-14T18:30:26Z","references":["https://osv.dev/vulnerability/GHSA-rcv9-qm8p-9p6j","https://nvd.nist.gov/vuln/detail/CVE-2025-6051","https://github.com/huggingface/transformers/pull/38844","https://github.com/huggingface/transformers/commit/54a02160eb030da9be18231c77791f2eb3a52216","https://github.com/huggingface/transformers/commit/ba8eaba9865618253f997784aa565b96206426f0","https://github.com/huggingface/transformers","https://huntr.com/bounties/af929523-7b59-418a-bf55-301830b2ac9d"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rcv9-qm8p-9p6j","url":"https://osv.dev/vulnerability/GHSA-rcv9-qm8p-9p6j"}],"summary":"Hugging Face Transformers library has Regular Expression Denial of Service"}