---
library_name: joblib
tags:
- security-research
- huntr
- modelscan
- joblib
---

# Joblib pydoc.pipepager ModelScan bypass PoC

This repository contains a restrained proof of concept for an authorized Huntr security report against ModelScan's Joblib scanning path.

Do not load `poc_pydoc_pipepager_bypass.joblib` outside an isolated test environment. The payload demonstrates load-time execution by writing the marker file `/tmp/modelscan_joblib_pydoc_pipepager_marker`.

Files:

- `poc_pydoc_pipepager_bypass.joblib`: minimal Joblib payload.
- `poc_joblib_pydoc_pipepager_bypass.py`: generator and verifier script.
- `poc_pydoc_pipepager_bypass.modelscan.json`: ModelScan 0.8.8 JSON output showing zero detected issues.

SHA-256 for `poc_pydoc_pipepager_bypass.joblib`:

```text
5ac854e4906c2688de5df48130a789bd4c14f1b255b36a3e0d784bdd8f02a271
```