AI agent vulnerability · Transformers

CVE-2025-1194: Transformers Regular Expression Denial of Service (ReDoS) vulnerability

mediumCVSS 3.1 4.3GHSA-fpwr-67px-3qhx

A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs.

Published Apr 29, 2025 · Updated Aug 4, 2025

Affected packages

transformers

Ecosystem: PyPI
Affected: < 4.50.0
Fixed in: 4.50.0
Check: pip show transformers

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_gpt_neox_japanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.48.1 (latest).

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Transformers vulnerabilities

All Transformers entries