--- library_name: pytorch tags: - security-research - modelscan-bypass license: mit --- # ModelScan Bypass PoC — gc.disable Security research for responsible disclosure via Huntr MFV program. ## Vulnerability `gc.disable` is not in modelscan's `unsafe_globals` blocklist. modelscan reports "No issues found" but loading triggers disables Python garbage collector — memory leak DoS, eventual OOM crash. ## Impact: MEDIUM ## Reproduction ```bash pip install modelscan modelscan scan -p bypass_poc.pkl # Output: "No issues found!" ```