sentence-transformers 2.3.0-5.5.1 code injection: import_module_class in sentence_transformers/util/misc.py short-circuits when a model path exists locally, bypassing trust_remote_code=False and importing attacker-controlled modeling_*.py referenced by modules.json during local model load. Upgrade to 5.6.0 (warns only); until v6.0, load only trusted local model dirs or set trust_remote_code=True only after review.