aleff-huggingface
/

joblib-sklearn-mff-poc

security-research

model-file-format

Model card Files Files and versions

joblib-sklearn-mff-poc

8.87 kB

Ctrl+K

Ctrl+K

1 contributor

History: 2 commits

aleff-huggingface's picture

aleff-huggingface

Add controlled Joblib model file format PoC

731a8b1 verified 3 months ago

.gitattributes

1.52 kB
initial commit 3 months ago
01_payload_only.joblib
Detected Pickle imports (1)
- "builtins.eval"
How to fix it?
146 Bytes
xet

Add controlled Joblib model file format PoC 3 months ago
04_sklearn_clean.joblib
Detected Pickle imports (6)
- "sklearn.pipeline.Pipeline",
- "joblib.numpy_pickle.NumpyArrayWrapper",
- "sklearn.preprocessing._data.StandardScaler",
- "numpy.dtype",
- "numpy.ndarray",
- "numpy._core.multiarray.scalar"
How to fix it?
1.39 kB
xet

Add controlled Joblib model file format PoC 3 months ago
05_sklearn_attr_payload.joblib
Detected Pickle imports (6)
- "sklearn.preprocessing._data.StandardScaler",
- "numpy.dtype",
- "sklearn.pipeline.Pipeline",
- "numpy._core.multiarray.scalar",
- "numpy.ndarray",
- "joblib.numpy_pickle.NumpyArrayWrapper"
How to fix it?
1.57 kB
xet

Add controlled Joblib model file format PoC 3 months ago
README.md

1.15 kB
Add controlled Joblib model file format PoC 3 months ago
SHA256SUMS.txt

318 Bytes
Add controlled Joblib model file format PoC 3 months ago
generate_poc.py

1.75 kB
Add controlled Joblib model file format PoC 3 months ago
verify_poc.py

1.03 kB
Add controlled Joblib model file format PoC 3 months ago