Zafran Labs identified high-severity vulnerabilities in Hugging Face's diffusers library, allowing malicious model repositories to execute arbitrary code on client machines. The vulnerabilities bypass the…
5 articles · Updated July 28, 2026
Recent Intelligence Reports
Facehugger Vulnerabilities In Hugging Face Diffusers Open Door To Supply Chain Attacks On Enterprise Ai— www.zafran.io · July 29, 2026