Safety vulnerability ID: 76262
The information on this page was manually curated by our Cybersecurity Intelligence Team.
A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationnougatfast.py. The vulnerability occurs in the postprocesssingle() function, where a regular expression processes specially crafted input. The issue stems from the regex exhibiting exponential time complexity under certain conditions, leading to excessive backtracking. This can result in significantly high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.46.3.
Latest version: 4.50.3
State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
This vulnerability has no description
Scan your Python project for dependency vulnerabilities in two minutes
Scan your application