CVE-2025-3777 | huggingface transformers up to 4.52.0 URL Validation image_utils.py startswith information disclosure

A vulnerability was found in huggingface transformers up to 4.52.0. It has been declared as problematic. Affected by this vulnerability is the function startswith of the file image_utils.py of the component URL Validation Handler. The manipulation leads to information disclosure.

This vulnerability is known as CVE-2025-3777. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.