（CVE-2025-5197）Hugging Face Transformers正则表达式拒绝服务漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-5197
• https://github.com/advisories/GHSA-9356-575x-2w9m
• https://github.com/huggingface/transformers/commit/944b56000be5e9b61af8301aa340838770ad8a0b
• https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf
• https://cve.imfht.com/detail/CVE-2025-5197
• https://app.opencve.io/cve/?product=transformers&vendor=huggingface
• https://vulners.com/cve/CVE-2025-5197
• https://avd.aliyun.com/product?prod=transformers&page=0

Related Vulnerabilities

• PoCCVE-2023-51449: Gradio Hugging Face - Local File Inclusion
• （CVE-2025-3264）Hugging Face Transformers库正则表达式拒绝服务漏洞