{"data":{"ecosystem":"pypi","name":"diffusers","url":"https://aisecwatch.com/packages/pypi/diffusers","latestVersion":"0.41.0","firstReleaseAt":"2022-05-30T16:25:48.098Z","repository":"https://github.com/huggingface/diffusers","llm":{"exposure":"direct","depth":0,"integratedAt":"2022-05-30T16:25:48.098Z","integratedVersion":"0.0.1","sdks":["huggingface"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"accelerate","versionSpec":">=0.31.0","scope":"extra:training"},{"ecosystem":"pypi","name":"bitsandbytes","versionSpec":">=0.43.3","scope":"extra:bitsandbytes"},{"ecosystem":"pypi","name":"datasets","versionSpec":null,"scope":"extra:training"},{"ecosystem":"pypi","name":"hf-doc-builder","versionSpec":">=0.3.0","scope":"extra:quality"},{"ecosystem":"pypi","name":"huggingface-hub","versionSpec":"<2.0,>=1.32.0","scope":"runtime"},{"ecosystem":"pypi","name":"nvidia-modelopt","versionSpec":">=0.33.1","scope":"extra:nvidia-modelopt"},{"ecosystem":"pypi","name":"optimum-quanto","versionSpec":">=0.2.6","scope":"extra:optimum-quanto"},{"ecosystem":"pypi","name":"peft","versionSpec":">=0.17.0","scope":"extra:training"},{"ecosystem":"pypi","name":"safetensors","versionSpec":">=0.8.0","scope":"runtime"},{"ecosystem":"pypi","name":"sdnq","versionSpec":">=0.2.2","scope":"extra:sdnq"},{"ecosystem":"pypi","name":"timm","versionSpec":null,"scope":"extra:training"},{"ecosystem":"pypi","name":"torchao","versionSpec":">=0.15.0","scope":"extra:torchao"},{"ecosystem":"pypi","name":"transformers","versionSpec":">=4.41.2","scope":"extra:test"},{"ecosystem":"pypi","name":"flashpack","versionSpec":null,"scope":"extra:flashpack"},{"ecosystem":"pypi","name":"filelock","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"ftfy","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"gguf","versionSpec":">=0.10.0","scope":"extra:gguf"},{"ecosystem":"pypi","name":"gitpython","versionSpec":"<3.1.19","scope":"extra:test"},{"ecosystem":"pypi","name":"importlib-metadata","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"invisible-watermark","versionSpec":">=0.2.0","scope":"extra:test"},{"ecosystem":"pypi","name":"isort","versionSpec":">=5.5.4","scope":"extra:quality"},{"ecosystem":"pypi","name":"jinja2","versionSpec":null,"scope":"extra:training"},{"ecosystem":"pypi","name":"librosa","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"llvmlite","versionSpec":">=0.40.0","scope":"extra:test"},{"ecosystem":"pypi","name":"numba","versionSpec":">=0.57.0","scope":"extra:test"},{"ecosystem":"pypi","name":"numpy","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"parameterized","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"phonemizer","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"pillow","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"protobuf","versionSpec":"<4,>=3.20.3","scope":"extra:training"},{"ecosystem":"pypi","name":"pytest","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-timeout","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-xdist","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"regex","versionSpec":"!=2019.12.17","scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"requests-mock","versionSpec":"==1.10.0","scope":"extra:test"},{"ecosystem":"pypi","name":"ruff","versionSpec":"==0.9.10","scope":"extra:quality"},{"ecosystem":"pypi","name":"scipy","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"sentencepiece","versionSpec":"!=0.1.92,>=0.1.91","scope":"extra:test"},{"ecosystem":"pypi","name":"tensorboard","versionSpec":null,"scope":"extra:training"},{"ecosystem":"pypi","name":"tiktoken","versionSpec":">=0.7.0","scope":"extra:test"},{"ecosystem":"pypi","name":"torch","versionSpec":">=2.6","scope":"extra:torch"},{"ecosystem":"pypi","name":"torchsde","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"torchvision","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"urllib3","versionSpec":"<=2.0.0","scope":"extra:quality"}],"advisories":[{"id":"de507efc-042e-4cd8-ba8a-ccac449296e3","url":"https://aisecwatch.com/issues/de507efc-042e-4cd8-ba8a-ccac449296e3","cveId":"CVE-2026-45804","title":"GHSA-7wx4-6vff-v64p: Diffusers: TOCTOU Trust Remote Code Bypass","severity":"high","publishedAt":"2026-05-20T15:31:33.000Z","affected":["diffusers@< 0.38.0 (fixed: 0.38.0)"],"epssScore":0.0037},{"id":"167acf42-031b-4fdc-b98f-76828c36d559","url":"https://aisecwatch.com/issues/167acf42-031b-4fdc-b98f-76828c36d559","cveId":"CVE-2026-44513","title":"GHSA-98h9-4798-4q5v: Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components","severity":"high","publishedAt":"2026-05-07T05:31:17.000Z","affected":["diffusers@< 0.38.0 (fixed: 0.38.0)"],"epssScore":0.0089},{"id":"1937bb11-7223-483f-a88e-b9e3a2353e8b","url":"https://aisecwatch.com/issues/1937bb11-7223-483f-a88e-b9e3a2353e8b","cveId":null,"title":"GHSA-j7w6-vpvq-j3gm: Duplicate Advisory: Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components","severity":"high","publishedAt":"2026-05-07T02:24:22.000Z","affected":["diffusers@< 0.38.0 (fixed: 0.38.0)"],"epssScore":null}],"checkedAt":"2026-10-09T22:22:43.885Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}