Transformers 5.22.2 patches template sandboxing and distributed setup

Hugging Face released Transformers 5.22.2 on November 6, describing it as a patch for security and distributed setup. The concise release notes list Jinja sandbox hardening and a change to set a distributed device identifier only for NCCL.

Why this matters

Transformers is used in many model-loading and inference workflows. Template code can sit on the path between a model configuration and application output, which makes template handling worth reviewing even when a change appears small. The release notes do not by themselves establish which applications are vulnerable or describe an observed attack; readers should review the linked changes and any current project security guidance for their exact version and configuration.

The distributed change is separate from template sandboxing. Operators with multi-device or distributed deployments should test their configurations after upgrading rather than assuming a patch is risk-free. OpenSourceCoder.com has not reproduced a vulnerability or tested this release.

Check before upgrading

The Transformers repository is available under Apache-2.0. Pin versions, review release notes and validate existing models and dependencies in a safe environment. In our view, small security maintenance releases deserve attention precisely because they touch libraries that sit underneath many different applications.