Skip to content

Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components

High severity GitHub Reviewed Published May 1, 2026 in huggingface/diffusers • Updated Jun 5, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts