（CVE-2025-3264）Hugging Face Transformers库正则表达式拒绝服务漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-3264
• https://access.redhat.com/security/cve/cve-2025-3264
• https://github.com/advisories/GHSA-jjph-296x-mrcr
• https://huntr.com/bounties/3c6f7822-9992-476d-8cf0-b0b1623427df
• https://www.nsfocus.net/vulndb/122206
• https://cve.imfht.com/detail/CVE-2025-3264?lang=en
• https://avd.aliyun.com/product?prod=transformers
• https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76

Related Vulnerabilities

• （CVE-2025-5197）Hugging Face Transformers正则表达式拒绝服务漏洞
• PoCCVE-2023-51449: Gradio Hugging Face - Local File Inclusion