{"id":57681740,"number":"0.4.2","published_at":"2022-10-11T22:45:44.000Z","licenses":null,"integrity":"sha256-dc9aa1947c2f32bbc17527f54cf22f20eec735b60a6857b89ebfd2848066b093","status":null,"download_url":"https://files.pythonhosted.org/packages/75/fd/5705d30132c8b8ede77e57118cb00120ca7582c45495a39672bbbf46938f/diffusers-0.4.2-py3-none-any.whl","registry_url":"https://pypi.org/project/diffusers/0.4.2","documentation_url":"https://diffusers.readthedocs.io/en/0.4.2","install_command":"pip install diffusers==0.4.2 --index-url https://pypi.org/simple","immutable":null,"metadata":{"download_url":"https://files.pythonhosted.org/packages/75/fd/5705d30132c8b8ede77e57118cb00120ca7582c45495a39672bbbf46938f/diffusers-0.4.2-py3-none-any.whl","requires_python":"\u003e=3.7.0","yanked":false,"yanked_reason":null,"packagetype":"bdist_wheel","python_version":"py3","size":229943,"has_sig":false},"created_at":"2022-10-11T22:53:20.049Z","updated_at":"2025-07-04T07:10:38.034Z","purl":"pkg:pypi/diffusers@0.4.2","related_tag":{"name":"v0.4.2","sha":"b2c9b5469a06c577651811d2dcffabcd10b256ac","kind":"tag","published_at":"2022-10-11T22:29:33.000Z","download_url":"https://codeload.github.com/huggingface/diffusers/tar.gz/v0.4.2","html_url":"https://github.com/huggingface/diffusers/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/huggingface/diffusers@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/huggingface%2Fdiffusers/tags/v0.4.2/manifests","release_url":null},"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/versions/0.4.2","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers/versions/0.4.2/codemeta","dependencies":[{"id":648849288,"ecosystem":"pypi","package_name":"jax","requirements":"!=0.3.2,\u003c=0.3.6,\u003e=0.2.8","kind":"flax","optional":false},{"id":648849292,"ecosystem":"pypi","package_name":"jax","requirements":"!=0.3.2,\u003c=0.3.6,\u003e=0.2.8","kind":"dev","optional":false},{"id":648849271,"ecosystem":"pypi","package_name":"accelerate","requirements":"\u003e=0.11.0","kind":"training","optional":false},{"id":648849281,"ecosystem":"pypi","package_name":"accelerate","requirements":"\u003e=0.11.0","kind":"test","optional":false},{"id":648849304,"ecosystem":"pypi","package_name":"accelerate","requirements":"\u003e=0.11.0","kind":"dev","optional":false},{"id":648849285,"ecosystem":"pypi","package_name":"black","requirements":"==22.8","kind":"quality","optional":false},{"id":648849308,"ecosystem":"pypi","package_name":"black","requirements":"==22.8","kind":"dev","optional":false},{"id":648849270,"ecosystem":"pypi","package_name":"datasets","requirements":"*","kind":"training","optional":false},{"id":648849280,"ecosystem":"pypi","package_name":"datasets","requirements":"*","kind":"test","optional":false},{"id":648849303,"ecosystem":"pypi","package_name":"datasets","requirements":"*","kind":"dev","optional":false},{"id":648849314,"ecosystem":"pypi","package_name":"filelock","requirements":"*","kind":"runtime","optional":false},{"id":648849283,"ecosystem":"pypi","package_name":"flake8","requirements":"\u003e=3.8.3","kind":"quality","optional":false},{"id":648849306,"ecosystem":"pypi","package_name":"flake8","requirements":"\u003e=3.8.3","kind":"dev","optional":false},{"id":648849286,"ecosystem":"pypi","package_name":"flax","requirements":"\u003e=0.4.1","kind":"flax","optional":false},{"id":648849290,"ecosystem":"pypi","package_name":"flax","requirements":"\u003e=0.4.1","kind":"dev","optional":false},{"id":648849282,"ecosystem":"pypi","package_name":"hf-doc-builder","requirements":"\u003e=0.3.0","kind":"quality","optional":false},{"id":648849289,"ecosystem":"pypi","package_name":"hf-doc-builder","requirements":"\u003e=0.3.0","kind":"docs","optional":false},{"id":648849315,"ecosystem":"pypi","package_name":"importlib-metadata","requirements":"*","kind":"runtime","optional":false},{"id":648849284,"ecosystem":"pypi","package_name":"isort","requirements":"\u003e=5.5.4","kind":"quality","optional":false},{"id":648849307,"ecosystem":"pypi","package_name":"isort","requirements":"\u003e=5.5.4","kind":"dev","optional":false},{"id":648849312,"ecosystem":"pypi","package_name":"numpy","requirements":"*","kind":"runtime","optional":false},{"id":648849279,"ecosystem":"pypi","package_name":"onnxruntime","requirements":"*","kind":"test","optional":false},{"id":648849302,"ecosystem":"pypi","package_name":"onnxruntime","requirements":"*","kind":"dev","optional":false},{"id":648849309,"ecosystem":"pypi","package_name":"Pillow","requirements":"\u003c10.0","kind":"runtime","optional":false},{"id":648849278,"ecosystem":"pypi","package_name":"pytest","requirements":"*","kind":"test","optional":false},{"id":648849301,"ecosystem":"pypi","package_name":"pytest","requirements":"*","kind":"dev","optional":false},{"id":648849277,"ecosystem":"pypi","package_name":"pytest-timeout","requirements":"*","kind":"test","optional":false},{"id":648849311,"ecosystem":"pypi","package_name":"regex","requirements":"!=2019.12.17","kind":"runtime","optional":false},{"id":648849310,"ecosystem":"pypi","package_name":"requests","requirements":"*","kind":"runtime","optional":false},{"id":648849275,"ecosystem":"pypi","package_name":"scipy","requirements":"*","kind":"test","optional":false},{"id":648849298,"ecosystem":"pypi","package_name":"scipy","requirements":"*","kind":"dev","optional":false},{"id":648849269,"ecosystem":"pypi","package_name":"tensorboard","requirements":"*","kind":"training","optional":false},{"id":648849295,"ecosystem":"pypi","package_name":"tensorboard","requirements":"*","kind":"dev","optional":false},{"id":648849272,"ecosystem":"pypi","package_name":"torch","requirements":"\u003e=1.4","kind":"torch","optional":false},{"id":648849293,"ecosystem":"pypi","package_name":"torch","requirements":"\u003e=1.4","kind":"dev","optional":false},{"id":648849274,"ecosystem":"pypi","package_name":"torchvision","requirements":"*","kind":"test","optional":false},{"id":648849297,"ecosystem":"pypi","package_name":"torchvision","requirements":"*","kind":"dev","optional":false},{"id":648849273,"ecosystem":"pypi","package_name":"transformers","requirements":"\u003e=4.21.0","kind":"test","optional":false},{"id":648849296,"ecosystem":"pypi","package_name":"transformers","requirements":"\u003e=4.21.0","kind":"dev","optional":false},{"id":648849268,"ecosystem":"pypi","package_name":"modelcards","requirements":"\u003e=0.1.4","kind":"training","optional":false},{"id":648849294,"ecosystem":"pypi","package_name":"modelcards","requirements":"\u003e=0.1.4","kind":"dev","optional":false},{"id":648849313,"ecosystem":"pypi","package_name":"huggingface-hub","requirements":"\u003e=0.10.0","kind":"runtime","optional":false},{"id":648849287,"ecosystem":"pypi","package_name":"jaxlib","requirements":"\u003c=0.3.6,\u003e=0.1.65","kind":"flax","optional":false},{"id":648849291,"ecosystem":"pypi","package_name":"jaxlib","requirements":"\u003c=0.3.6,\u003e=0.1.65","kind":"dev","optional":false},{"id":648849305,"ecosystem":"pypi","package_name":"hf-doc-builder","requirements":"\u003e=0.3.0","kind":"dev","optional":false},{"id":648849300,"ecosystem":"pypi","package_name":"pytest-timeout","requirements":"*","kind":"dev","optional":false},{"id":648849276,"ecosystem":"pypi","package_name":"pytest-xdist","requirements":"*","kind":"test","optional":false},{"id":648849299,"ecosystem":"pypi","package_name":"pytest-xdist","requirements":"*","kind":"dev","optional":false}],"advisories":[{"uuid":"GSA_kwCzR0hTQS03d3g0LTZ2ZmYtdjY0cM4ABXJo","identifiers":["GHSA-7wx4-6vff-v64p","CVE-2026-45804"],"url":"https://github.com/advisories/GHSA-7wx4-6vff-v64p","title":"Diffusers: TOCTOU Trust Remote Code Bypass","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["0.38.0"]},{"uuid":"GSA_kwCzR0hTQS05OGg5LTQ3OTgtNHE1ds4ABWYU","identifiers":["GHSA-98h9-4798-4q5v","CVE-2026-44513"],"url":"https://github.com/advisories/GHSA-98h9-4798-4q5v","title":"Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["0.38.0"]},{"uuid":"GSA_kwCzR0hTQS1qN3c2LXZwdnEtajNnbc4ABWXu","identifiers":["GHSA-j7w6-vpvq-j3gm","CVE-2026-44827"],"url":"https://github.com/advisories/GHSA-j7w6-vpvq-j3gm","title":"Diffusers has a `trust_remote_code` bypass via `custom_pipeline` and local custom components","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["0.38.0"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/diffusers"}