VendorsHugging Facediffusersall versions
Vulnerabilities

Hugging Face Diffusers

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-44513
Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components
Published 2026-05-14 · Modified
8.8EPSS 0.011
CVE-2026-44827
Diffusers: None.py Trust Remote Code Bypass
Published 2026-05-14 · Analyzed
8.8EPSS 0.007
CVE-2026-45804
Diffusers: TOCTOU Trust Remote Code Bypass
Published 2026-07-15 · Analyzed
7.5EPSS 0.004