Hugging Face Diffusers flaws allow arbitrary code execution

Three high-severity vulnerabilities in the Diffusers library enable malicious model repositories to execute arbitrary code on user machines. The flaws highlight risks in the AI supply chain, where self-reported model lineage often lacks verification.