CVE-2025-3933 | huggingface transformers up to 4.52.0 API Service token2json redos (EUVD-2025-21126)

July 11, 2025 Yanac

A vulnerability was found in huggingface transformers up to 4.52.0 and classified as problematic. This issue affects the function token2json of the component API Service. The manipulation leads to inefficient regular expression complexity.

The identification of this vulnerability is CVE-2025-3933. The attack may be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More