{"api_version":"v1","generated_at":"2026-10-08T05:10:00+00:00","product":{"cve_count":20,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-huggingface-huggingface-transformers-555a03ffc0f7","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"huggingface/transformers","next_cursor":null,"observations":[{"affected":"unspecified < 5.10.0","affected_versions_present":true,"cve_id":"CVE-2026-9856","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-9856","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-03T14:57:43.370Z","patch_url":"","primary_source":"","published":"2026-08-02T15:10:53.809Z"},{"affected":"huggingface/transformers: unspecified < 5.5.0","affected_versions_present":true,"cve_id":"CVE-2026-5241","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-5241","fixed":"RHSA-2026:42644: Red Hat OpenShift AI 2.25","last_modified":"2026-09-01T12:04:56.842Z","patch_url":"https://github.com/huggingface/transformers/commit/676559d5022b74aaa0cee1cee0842b7f27c5320e","primary_source":"","published":"2026-06-03T12:33:10.227Z"},{"affected":"unspecified < 5.3.0","affected_versions_present":true,"cve_id":"CVE-2026-4372","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-4372","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-05-26T15:21:02.376Z","patch_url":"https://github.com/huggingface/transformers/commit/a7f8e7ff37d87d1a1a0c8cf607971c607741452f","primary_source":"","published":"2026-05-24T13:40:40.995Z"},{"affected":"unspecified < v5.0.0rc3","affected_versions_present":true,"cve_id":"CVE-2026-1839","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-1839","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-04-07T13:27:41.789Z","patch_url":"https://github.com/huggingface/transformers/commit/03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396","primary_source":"","published":"2026-04-07T05:22:00.959Z"},{"affected":"unspecified < 4.53.0","affected_versions_present":true,"cve_id":"CVE-2025-6921","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-6921","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-09-23T14:56:29.038Z","patch_url":"https://github.com/huggingface/transformers/commit/47c34fba5c303576560cb29767efb452ff12b8be","primary_source":"","published":"2025-09-23T13:56:15.636Z"},{"affected":"huggingface/transformers: unspecified < 4.53.0","affected_versions_present":true,"cve_id":"CVE-2025-6051","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-6051","fixed":"4.53.0.","last_modified":"2025-09-15T15:59:54.371Z","patch_url":"https://huntr.com/bounties/af929523-7b59-418a-bf55-301830b2ac9d","primary_source":"","published":"2025-09-14T17:03:02.953Z"},{"affected":"unspecified < 4.53.0","affected_versions_present":true,"cve_id":"CVE-2025-6638","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-6638","fixed":"4.53.0.","last_modified":"2025-09-12T11:52:53.854Z","patch_url":"https://github.com/huggingface/transformers/commit/47c34fba5c303576560cb29767efb452ff12b8be","primary_source":"","published":"2025-09-12T10:46:07.934Z"},{"affected":"unspecified < 4.53.0","affected_versions_present":true,"cve_id":"CVE-2025-5197","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-5197","fixed":"4.53.0.","last_modified":"2025-08-06T13:03:10.518Z","patch_url":"https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf","primary_source":"","published":"2025-08-06T11:53:37.232Z"},{"affected":"unspecified < 4.52.1","affected_versions_present":true,"cve_id":"CVE-2025-3933","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-3933","fixed":"4.52.1.","last_modified":"2025-07-11T15:07:34.839Z","patch_url":"https://github.com/huggingface/transformers/commit/ebbe9b12dd75b69f92100d684c47f923ee262a93","primary_source":"","published":"2025-07-11T09:22:27.103Z"},{"affected":"unspecified < 4.52.1","affected_versions_present":true,"cve_id":"CVE-2025-3777","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-3777","fixed":"4.52.1.","last_modified":"2025-07-07T12:26:15.099Z","patch_url":"https://github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082","primary_source":"","published":"2025-07-07T09:55:38.190Z"},{"affected":"unspecified < 4.51.0","affected_versions_present":true,"cve_id":"CVE-2025-3264","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-3264","fixed":"4.51.0.","last_modified":"2025-07-07T14:40:12.531Z","patch_url":"https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76","primary_source":"","published":"2025-07-07T09:55:11.030Z"},{"affected":"unspecified < 4.51.0","affected_versions_present":true,"cve_id":"CVE-2025-3263","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-3263","fixed":"4.51.0.","last_modified":"2025-07-07T14:51:54.953Z","patch_url":"https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76","primary_source":"","published":"2025-07-07T09:54:59.670Z"},{"affected":"unspecified < 4.51.0","affected_versions_present":true,"cve_id":"CVE-2025-3262","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-3262","fixed":"4.51.0.","last_modified":"2025-07-07T15:19:42.413Z","patch_url":"https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76","primary_source":"","published":"2025-07-07T09:54:39.079Z"},{"affected":"unspecified < 4.50.0","affected_versions_present":true,"cve_id":"CVE-2025-2099","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-2099","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-05-19T13:45:13.385Z","patch_url":"https://github.com/huggingface/transformers/commit/8cb522b4190bd556ce51be04942720650b1a3e57","primary_source":"","published":"2025-05-19T11:22:36.908Z"},{"affected":"unspecified < 4.50.0","affected_versions_present":true,"cve_id":"CVE-2025-1194","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-1194","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-29T13:21:13.446Z","patch_url":"https://github.com/huggingface/transformers/commit/92c5ca9dd70de3ade2af2eb835c96215cc50e815","primary_source":"","published":"2025-04-29T11:30:38.810Z"},{"affected":"unspecified < 4.48.0","affected_versions_present":true,"cve_id":"CVE-2024-12720","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-12720","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-03-20T13:25:27.023Z","patch_url":"https://github.com/huggingface/transformers/commit/deac971c469bcbb182c2e52da0b82fb3bf54cccf","primary_source":"","published":"2025-03-20T10:11:15.586Z"},{"affected":"unspecified < 4.38","affected_versions_present":true,"cve_id":"CVE-2024-3568","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-3568","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-01T20:12:07.859Z","patch_url":"https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125","primary_source":"","published":"2024-04-10T17:07:55.667Z"},{"affected":"unspecified < 4.36","affected_versions_present":true,"cve_id":"CVE-2023-7018","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-7018","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T08:50:07.578Z","patch_url":"https://huntr.com/bounties/e1a3e548-e53a-48df-b708-9ee62140963c","primary_source":"","published":"2023-12-20T16:13:01.023Z"},{"affected":"unspecified < 4.36","affected_versions_present":true,"cve_id":"CVE-2023-6730","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-6730","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T08:35:14.897Z","patch_url":"https://github.com/huggingface/transformers/commit/1d63b0ec361e7a38f1339385e8a5a855085532ce","primary_source":"","published":"2023-12-19T12:11:20.729Z"},{"affected":"unspecified < 4.30.0","affected_versions_present":true,"cve_id":"CVE-2023-2800","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-2800","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-01-21T20:09:18.683Z","patch_url":"https://huntr.dev/bounties/a3867b4e-6701-4418-8c20-3c6e7084a44a","primary_source":"","published":"2023-05-18T00:00:00.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"huggingface"}}