last 60 dispatches · spectrum
Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it