Open Redirect Affecting transformers package, versions [,4.23.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-TRANSFORMERS-3092483
- published 1 Nov 2022
- disclosed 1 Nov 2022
- credit Unknown
How to fix?
Upgrade transformers to version 4.23.0 or higher.
Overview
transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow
Affected versions of this package are vulnerable to Open Redirect due to referencing an obsolete link.
References
CVSS Scores
version 3.1