Zafran Labs has disclosed FaceHugger, multiple remote code execution flaws in Hugging Face's diffusers. The flaws let a malicious model silently run code on any machine that loads it, bypassing the trust_remote_code control. @0xgalz @ido__shani
Zafran Security
@Zafran_io
Zafran's Threat Exposure Management Platform integrates with your security tools to reveal, remediate, and mitigate risk.
