huggingface diffusers vulnerabilities

4 published CVEs name huggingface diffusers among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 4
Critical: 0
Known exploited: 0

Critical 0High 3Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-65920
Diffusers Path Traversal via weight_map Arbitrary File Read
huggingface · diffusers
Medium5.3
CVE-2026-45804
Diffusers: TOCTOU Trust Remote Code Bypass
huggingface · diffusers
High7.5
CVE-2026-44827
Diffusers: None.py Trust Remote Code Bypass
huggingface · diffusers
High8.8
CVE-2026-44513
Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components
huggingface · diffusers
High8.8

Most common weaknesses