Huggingface / Diffusers
4 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-65920 | Diffusers Path Traversal via weight_map Arbitrary File Read | MEDIUM | 5.3 | Jul 23, 2026 |
| CVE-2026-45804 | Diffusers: TOCTOU Trust Remote Code Bypass | HIGH | 7.5 | Jul 15, 2026 |
| CVE-2026-44827 | Diffusers: None.py Trust Remote Code Bypass | HIGH | 8.8 | May 14, 2026 |
| CVE-2026-44513 | Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components | HIGH | 8.8 | May 14, 2026 |
| CVE-2025-14922 | Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability | HIGH | 7.8 | Dec 23, 2025 |
Showing 1 to 4 of 4 CVEs