MediumVulnerability
CVE-2025-3264: Hugging Face Transformers ReDoS in get_imports() regex parsing
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-3264
- Published
- Record updated
- Affected
- transformers < 4.51.0
- Fixed in
- 4.51.0
- released April 5, 2025, 93 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
A Regular Expression Denial of Service (ReDoS) flaw in the `get_imports()` function within `dynamic_module_utils.py` of the Hugging Face Transformers library affects version 4.49.0. The regex `\s*try\s*:.*?except.*?:`, used to filter try/except blocks from Python code, can be driven into catastrophic backtracking by crafted input strings, causing excessive CPU consumption. The source says this can disrupt remote code loading, exhaust resources in model serving, and enable supply chain attacks and development pipeline disruption.
Mitigation
Fixed in version 4.51.0.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- transformersPyPILLM dependency since 2016-08-17 · 141 tracked dependents
Related items
- HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
- HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
- MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
- HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
- MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database