trust-remote-code

Records3

1. closed8.8
   vLLM CVE-2026-5817: Docker Model Runner vllm-metal arbitrary code execution vulnerability

   Patch now · Disclosed · since 22 May 2026 · CVE-2026-5817

   AI
2. closed8.8
   Hugging Face libraries Hugging Face Diffusers custom pipeline trust_remote_code bypass vulnerability

   Patch now · Disclosed · since 7 May 2026 · CVE-2026-44827

   AI
3. closed8.8
   Hugging Face libraries Hugging Face Diffusers trust_remote_code bypass allows remote code execution

   Patch now · Disclosed · since 7 May 2026 · CVE-2026-44513

   AI