Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard

Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it