{"data":{"id":"1937bb11-7223-483f-a88e-b9e3a2353e8b","title":"GHSA-j7w6-vpvq-j3gm: Duplicate Advisory: Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components","summary":"This advisory was withdrawn as a duplicate of GHSA-98h9-4798-4q5v and is kept to preserve external references. The original description reports that DiffusionPipeline.from_pretrained in Diffusers can load arbitrary code through the custom_pipeline flow from a Hub repo, or when _class_name in model_index.json names a custom class, without trust_remote_code being passed. The source describes the call succeeding and returning a functional pipeline.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-j7w6-vpvq-j3gm","publishedAt":"2026-05-07T02:24:22.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["diffusers@< 0.38.0 (fixed: 0.38.0)"],"affectedPackageNames":["diffusers"],"affectedPackageRefs":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Diffusers","HuggingFace Hub","DiffusionPipeline"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-j7w6-vpvq-j3gm"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-07T02:24:22.000Z","fixReleasedAt":"2026-05-01T05:42:12.779Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:36:46.033Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"diffusers","fixedVersion":"0.38.0","matchedVersion":"0.38.0","fixReleasedAt":"2026-05-01T05:42:12.779Z","daysToFix":-6,"match":"name","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:45.887Z"}]}}