{"api_version":"v1","generated_at":"2026-10-04T06:30:00+00:00","product":{"cve_count":4,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-huggingface-diffusers-055f42e7d842","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"diffusers","next_cursor":null,"observations":[{"affected":"\u2264 0.39.0","affected_versions_present":true,"cve_id":"CVE-2026-65920","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-65920","fixed":"cee298c1f37c439a9a408396b8283a921238a1c6","last_modified":"2026-07-24T21:35:29.163Z","patch_url":"https://github.com/huggingface/diffusers/issues/14175","primary_source":"","published":"2026-07-23T17:43:56.238Z"},{"affected":"< 0.38.0","affected_versions_present":true,"cve_id":"CVE-2026-45804","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-45804","fixed":"0.38.0.","last_modified":"2026-07-15T17:27:31.546Z","patch_url":"https://github.com/huggingface/diffusers/commit/a37f6f8394ac2a7ee8360c3abea811efe54512b1","primary_source":"","published":"2026-07-15T16:05:35.217Z"},{"affected":"< 0.38.0","affected_versions_present":true,"cve_id":"CVE-2026-44827","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44827","fixed":"For more information visit https://access.redhat.com/errata/RHSA-2026:69466","last_modified":"2026-05-14T18:03:35.120Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-44827","primary_source":"","published":"2026-05-14T16:33:42.373Z"},{"affected":"< 0.38.0","affected_versions_present":true,"cve_id":"CVE-2026-44513","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-44513","fixed":"For more information visit https://access.redhat.com/errata/RHSA-2026:69466","last_modified":"2026-08-28T12:04:31.466Z","patch_url":"https://access.redhat.com/security/cve/CVE-2026-44513","primary_source":"","published":"2026-05-14T16:26:03.907Z"}],"source_generated_at":"2026-10-03T06:19:54.128Z","vendor":"huggingface"}}