pypi:transformersThis dossier links the stable identity pypi:transformers to 10 exact observed versions across 12 public repositories.
A package identity or provider interface in published code does not prove configuration, an account, procurement, data transfer or an API call.
ecosystem:name + exact version + evidence pathPublication age and licenses come from deps.dev metadata. They are context—not a maintenance, legal or portability verdict.
17 Dec 202405 Apr 202514 Apr 202530 May 202504 Jul 202514 Oct 202525 Nov 202513 Jan 202616 Jan 202605 May 2026landeshauptstadt-muenchen/f-13-rag4 Occurrencesvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldai3 Occurrencesuba-ki-lab/coding-agent-usage-simulation1 Occurrenceuba-ki-lab/gsa-extraction1 Occurrenceuba-ki-lab/llm-questionnaire-benchmarking-framework1 Occurrenceuba-ki-lab/llm-testframework1 Occurrenceuba-ki-lab/objection-management1 Occurrenceuba-ki-lab/ressource-efficient-computer-vision1 Occurrenceuba-ki-lab/retrieval-evaluation1 Occurrencevernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-airguardai1 Occurrencevernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-smartenergie1 Occurrencevernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-sovia1 Occurrenceuba-ki-lab/coding-agent-usage-simulationuv.locklandeshauptstadt-muenchen/f-13-ragrequirements-dev.txtlandeshauptstadt-muenchen/f-13-ragrequirements-gpu.txtlandeshauptstadt-muenchen/f-13-ragrequirements-testing.txtlandeshauptstadt-muenchen/f-13-ragrequirements.txtuba-ki-lab/gsa-extractionuv.lockuba-ki-lab/llm-questionnaire-benchmarking-frameworkuv.lockuba-ki-lab/llm-testframeworkuv.lockuba-ki-lab/objection-managementuv.lockuba-ki-lab/ressource-efficient-computer-visionuv.lockuba-ki-lab/retrieval-evaluationuv.lockvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-airguardaiuv.lockvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-smartenergieuv.lockvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-soviauv.lockvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldaiasrp_dir/requirements.txtvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldairequirements-file/requirements-docker.txtvernetzte-stadt-gelsenkirchen/urban.ki/urban-ki-urbanshieldairequirements-file/requirements.txtHuggingFace transformers vulnerable to remote code execution
10 Sept 2026Transformers is vulnerable to ReDoS attack through its DonutProcessor class
10 Sept 2026Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
10 Sept 2026Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
10 Sept 2026HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
10 Sept 2026Transformers Regular Expression Denial of Service (ReDoS) vulnerability
13 Aug 2026Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
10 Sept 2026huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path
10 Sept 2026Transformers Regular Expression Denial of Service (ReDoS) vulnerability
13 Aug 2026Deserialization of Untrusted Data in Hugging Face Transformers
10 Sept 2026Transformers vulnerable to ReDoS attack through its get_imports() function
07 Jul 2026Transformers's Improper Input Validation vulnerability can be exploited through username injection
10 Sept 2026Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
07 Jul 2026Hugging Face Transformers Regular Expression Denial of Service
10 Jun 2026Deserialization of Untrusted Data in Hugging Face Transformers
10 Sept 2026Hugging Face Transformers library has Regular Expression Denial of Service
10 Sept 2026Deserialization of Untrusted Data in Hugging Face Transformers
10 Sept 2026Transformers save_pretrained path traversal allows arbitrary file writes through chat template names
10 Sept 2026Not reported
21 May 2026Not reported
21 May 2026Not reported
21 May 2026Not reported
21 May 2026Not reported
21 May 2026Not reported
21 May 2026Not reported
21 May 2026Not reported
21 May 2026Only exact npm and PyPI tuples are enriched. Reported SPDX expressions are metadata; no compatibility, obligation or legal conclusion is inferred.
Retrieval, parsing, matching and publishing use no generative AI model.i6eal (2026): Transformers — exact AI dependency evidence dossier, data state 30 Sept 2026. https://i6eal.de/en/tools/ki-abhaengigkeitsatlas/paket/transformers-65289303/
We build source-backed data products with stable identities, reproducible joins and boundaries that remain visible.
These tools cover related ground.