https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T00:22:39.329499+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03547 bdu:2026-03547 2026-10-10T00:22:39.336167+00:00 bdu:2026-03547 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-10T00:22:39.336215+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-246449 EUVD-2026-246449 2026-10-10T00:22:39.336237+00:00 EUVD-2026-246449 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3264 fkie_cve-2025-3264 2026-10-10T00:22:39.336249+00:00

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular expression pattern `\s*try\s*:.*?except.*?:` used to filter out try/except blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.

 https://cve.radiocsirt.org/vuln/ghsa-jjph-296x-mrcr GHSA-jjph-296x-mrcr — Transformers vulnerable to ReDoS attack through its get_imports() function 2026-10-10T00:22:39.336282+00:00

Affected: PyPI: transformers

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular expression pattern `\s*try\s*:.*?except.*?:` used to filter out try/except blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.

 https://cve.radiocsirt.org/vuln/pysec-2026-1985 PYSEC-2026-1985 — Transformers vulnerable to ReDoS attack through its get_imports() function 2026-10-10T00:22:39.336308+00:00

Affected: PyPI: transformers

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular expression pattern `\s*try\s*:.*?except.*?:` used to filter out try/except blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1518 WID-SEC-W-2025-1518 — IBM App Connect Enterprise: Mehrere Schwachstellen 2026-10-10T00:22:39.336330+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen, und um falsche Informationen darzustellen.