Login Request a demo
DI
Product
diffusers
by huggingface · last CVE Jul 23, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add diffusers to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44827
8.8
1%
May 14
Diffusers: None.py Trust Remote Code Bypass
Affected: < 0.38.0
CVE-2026-44513
8.8
1%
May 14
Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components
Affected: < 0.38.0
CVE-2026-45804
7.5
0%
Jul 15
Diffusers: TOCTOU Trust Remote Code Bypass
Affected: < 0.38.0
Showing 3