Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

Three Hugging Face Diffusers flaws bypass trust_remote_code, letting crafted model repositories execute code during custom pipeline loading.

Raccontata dathehackernews.com