Product by Hugging Face

    Diffusers

    4 known vulnerabilities in Diffusers (Hugging Face), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Diffusers (Hugging Face)
    HighCVE-2026-44513

    Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

    		8.8
    HighCVE-2026-44827

    Diffusers: None.py Trust Remote Code Bypass

    		8.8
    HighCVE-2026-45804

    Diffusers: TOCTOU Trust Remote Code Bypass

    		7.5
    MediumCVE-2026-65920

    Diffusers Path Traversal via weight_map Arbitrary File Read

    		4.3

    All products by Hugging Face