Zafran Labs identified high-severity vulnerabilities in Hugging Face's diffusers library, allowing malicious model repositories to execute arbitrary code on client machines. The vulnerabilities bypass the…
Two critical vulnerabilities have been identified in Chainlit, an open-source AI framework used widely across enterprises. Discovered by Zafran Labs, these flaws enable attackers to steal sensitive cloud credentials and…