The Hacker News

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

Three Hugging Face Diffusers flaws bypass trust_remote_code, letting crafted model repositories execute code during custom ...