CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0.
Published Dec 19, 2023 · Updated Nov 22, 2024
Affected packages
transformers
- Ecosystem
- PyPI
- Affected
- < 4.36.0
- Fixed in
- 4.36.0
- Check
pip show transformers
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.0.
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-6730
- https://github.com/huggingface/transformers/commit/1d63b0ec361e7a38f1339385e8a5a855085532ce
- https://huntr.com/bounties/423611ee-7a2a-442a-babb-3ed2f8385c16
- https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2023-300.yaml
- https://github.com/advisories/GHSA-3863-2447-669p
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Transformers vulnerabilities
All Transformers entriesCVE-2026-80047
Hugging Face Transformers downloads custom generation code before trust consent
high7.8No fixSep 1, 2026CVE-2026-9856
Transformers save_pretrained path traversal allows arbitrary file writes through chat template names
high7.1Aug 2, 2026CVE-2026-5241
huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path
high8.0Jun 3, 2026CVE-2026-4372
HuggingFace transformers vulnerable to remote code execution
high7.8May 26, 2026CVE-2026-1839
HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
medium6.5Apr 7, 2026CVE-2025-6921
Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
medium5.3Sep 23, 2025