diffusers vulnerabilities (PyPI)

3 vulnerabilities.

• diffusers PyPI Diffusers: TOCTOU Trust Remote Code Bypass CVE-2026-45804 Fix available 7.5 HighMay 20, 2026
• diffusers PyPI Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components CVE-2026-44513 Fix available 8.8 HighMay 7, 2026
• diffusers PyPI Diffusers: None.py Trust Remote Code Bypass CVE-2026-44827 Fix available 8.8 HighMay 7, 2026