Search for packages
| purl | pkg:pypi/transformers@5.0.0rc3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-aqqd-thbn-byaf | transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file |
CVE-2026-1839
GHSA-69w3-r845-3855 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-06T07:48:27.441499+00:00 | GitLab Importer | Fixing | VCID-aqqd-thbn-byaf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/transformers/CVE-2026-1839.yml | 38.6.0 |
| 2026-06-04T16:53:48.882136+00:00 | GithubOSV Importer | Fixing | VCID-aqqd-thbn-byaf | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-69w3-r845-3855/GHSA-69w3-r845-3855.json | 38.6.0 |