CVE-2023-7018: transformers has a Deserialization of Untrusted Data vulnerability
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Published Dec 20, 2023 · Updated Nov 22, 2024
Affected packages
transformers
- Ecosystem
- PyPI
- Affected
- < 4.36.0
- Fixed in
- 4.36.0
- Check
pip show transformers
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-7018
- https://github.com/huggingface/transformers/commit/1d63b0ec361e7a38f1339385e8a5a855085532ce
- https://huntr.com/bounties/e1a3e548-e53a-48df-b708-9ee62140963c
- https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2023-301.yaml
- https://github.com/advisories/GHSA-v68g-wm8c-6x7j
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Transformers vulnerabilities
All Transformers entriesCVE-2026-80047
Hugging Face Transformers downloads custom generation code before trust consent
high7.8No fixSep 1, 2026CVE-2026-9856
Transformers save_pretrained path traversal allows arbitrary file writes through chat template names
high7.1Aug 2, 2026CVE-2026-5241
huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path
high8.0Jun 3, 2026CVE-2026-4372
HuggingFace transformers vulnerable to remote code execution
high7.8May 26, 2026CVE-2026-1839
HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
medium6.5Apr 7, 2026CVE-2025-6921
Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
medium5.3Sep 23, 2025