Huggingface Peft vulnerabilities

• huggingface peft peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules CVE-2026-71281 8.8 HighAugust 5, 2026