---
title: "CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability"
url: https://erroneo.us/security/cve/CVE-2023-6730/
description: "CVE-2023-6730 (transformers (PyPI)): Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36."
type: vulnerability-record
section: "Security Digest"
date_published: 2023-12-19
date_modified: 2024-11-22
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2023-6730"
kev: false
cvss: 9.0
epss: 0.00928
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2023-6730: transformers has a Deserialization of Untrusted Data vulnerability

**Signal:** Critical, preconditions apply. Severe if exploited, but exploitation needs conditions that may not apply to you. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- No confirmed exploitation. It is not in CISA’s KEV catalog. That can change quickly after a public write-up; re-check if you are affected.
- EPSS 0.9% , percentile 60: FIRST’s model estimates a 0.9% chance of exploitation activity in the next 30 days, higher than 60% of all scored CVEs (moderate). EPSS is a probability, not a verdict.
- Needs an account (low (any account)). Exposure depends on who can log in.
- Only applies if your dependency tree includes transformers (PyPI) < 4.36.0, fixed in 4.36.0 . Check your lockfile, including transitive dependencies.

## What it is

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

## Affected packages

- PyPI `transformers` < 4.36.0 → fixed: 4.36.0

## Affected products (CVE record)

- huggingface huggingface/transformers: unspecified < 4.36

## Severity

- @huntr_ai CVSS 3.0: 9 `CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H`
- GitHub CVSS 3.1: 9.0 `CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- FIRST EPSS (model of 2026-10-21): 0.93% probability of exploitation activity in the next 30 days; percentile 60.

## Sources

- [GitHub Advisory GHSA-3863-2447-669p](https://github.com/advisories/GHSA-3863-2447-669p)
- [CVE.org record CVE-2023-6730](https://www.cve.org/CVERecord?id=CVE-2023-6730)
- [NVD entry CVE-2023-6730](https://nvd.nist.gov/vuln/detail/CVE-2023-6730)
- [huntr.com](https://huntr.com/bounties/423611ee-7a2a-442a-babb-3ed2f8385c16)
- [github.com](https://github.com/huggingface/transformers/commit/1d63b0ec361e7a38f1339385e8a5a855085532ce)
- [github.com](https://github.com/pypa/advisory-database/tree/main/vulns/transformers/PYSEC-2023-300.yaml)

---
Source page: https://erroneo.us/security/cve/CVE-2023-6730/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt